Sensitive Information Exposure Vulnerability in WooCommerce File Uploads Addon

CVE-2024-13622

Summary

The File Uploads Addon for WooCommerce plugin for WordPress is susceptible to a vulnerability that allows unauthenticated attackers to access sensitive information stored in the '/wp-content/uploads' directory. This directory can contain sensitive customer file attachments uploaded through the WooCommerce platform. The flaw exists in all versions up to and including 1.7.1, leaving many WordPress sites at risk of unauthorized data extraction, potentially leading to significant data breaches.

References