Unknown File Uploads Addon for WooCommerce

2 known vulnerabilities in Unknown File Uploads Addon for WooCommerce, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-78371 CVSS 5.9 medium The File Uploads Addon for WooCommerce WordPress plugin before 1.7.6 does not verify that the person requesting a customer-uploaded file…
  • CVE-2026-13607 CVSS 5.9 medium The File Uploads Addon for WooCommerce WordPress plugin through 1.7.6 stores customer-uploaded files in a publicly web-accessible uploads…