Sensitive Information Exposure Vulnerability in WooCommerce File Uploads Addon

CVE-2024-13622

What is CVE-2024-13622?

The File Uploads Addon for WooCommerce plugin for WordPress is susceptible to a vulnerability that allows unauthenticated attackers to access sensitive information stored in the '/wp-content/uploads' directory. This directory can contain sensitive customer file attachments uploaded through the WooCommerce platform. The flaw exists in all versions up to and including 1.7.1, leaving many WordPress sites at risk of unauthorized data extraction, potentially leading to significant data breaches.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References