VendorsDIRECT SOFTWAREorder_attachments_for_woocommerceall versions
Vulnerabilities

DIRECT SOFTWARE Order Attachments for WooCommerce

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2024-13638
Order Attachments for WooCommerce <= 2.5.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Published 2025-02-28 · Analyzed
7.5EPSS 0.005
CVE-2024-9756
Order Attachments for WooCommerce 2.0 - 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary File Upload
Published 2024-10-12 · Analyzed
4.3EPSS 0.009