Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · net nu 137 bronnen 51 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2026-78371

MEDIUM · 5.9 CVSS Gepubliceerd: CWE-639

Beschrijving

The File Uploads Addon for WooCommerce WordPress plugin before 1.7.6 does not verify that the person requesting a customer-uploaded file is the customer who uploaded it, allowing unauthenticated attackers who know or guess a file's name to download other customers' uploaded files.

References