Sensitive Information Exposure Vulnerability in WooCommerce File Uploads Addon
CVE-2024-13622
7.5HIGH
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 18 February 2025
What is CVE-2024-13622?
The File Uploads Addon for WooCommerce plugin for WordPress is susceptible to a vulnerability that allows unauthenticated attackers to access sensitive information stored in the '/wp-content/uploads' directory. This directory can contain sensitive customer file attachments uploaded through the WooCommerce platform. The flaw exists in all versions up to and including 1.7.1, leaving many WordPress sites at risk of unauthorized data extraction, potentially leading to significant data breaches.
Affected Version(s)
File Uploads Addon for WooCommerce * <= 1.7.1