High · 7.5 CVE-2026-22334 EUVD-2026-37656GHSA-37m7-669m-h8r7

WordPress Woocommerce Book Price plugin <= 1.3 - Arbitrary File Download vulnerability

Published Jun 17, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack

Vendor: WPos Product: Woocommerce Book Price Category: Web / CMS

Description

Subscriber Arbitrary File Download in Woocommerce Book Price <= 1.3 versions.

Affected products

Vendor	Product	Affected	Fixed
WPos	Woocommerce Book Price	≤ 1.3	—

References

https://patchstack.com/database/wordpress/plugin/woo-book-price/vulnerability/wordpress-woocommerce-book-price-plugin-1-3-arbitrary-file-download-vulnerability?_s_id=cve vdb-entry