Description
Unauthenticated Arbitrary File Download in Extra Product Options & Add-Ons for WooCommerce < 7.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ThemeComplete | Extra Product Options & Add-Ons for WooCommerce | < 7.6 | 7.6 |
High · 7.5
CVE-2026-73181
EUVD-2026-60937GHSA-2gq3-vhpc-7q85
WordPress Extra Product Options & Add-Ons for WooCommerce plugin < 7.6 - Arbitrary File Download vulnerability
Published Aug 18, 2026 · Updated Aug 18, 2026 · Assigned by Patchstack