MEDIUM 5.9 NVD

CVE-2026-78371

The File Uploads Addon for WooCommerce WordPress plugin before 1.7.6 does not verify that the person requesting a customer-uploaded file is the customer who upl

The File Uploads Addon for WooCommerce WordPress plugin before 1.7.6 does not verify that the person requesting a customer-uploaded file is the customer who uploaded it, allowing unauthenticated attackers who know or guess a file's name to download other customers' uploaded files.

References

https://wpscan.com/vulnerability/7a9cda53-c62a-4249-baf2-7f25feeed17a/

Published: 2026-10-05 · Source: NVD · Feed updated: 2026-10-05

This medium severity vulnerability with a CVSS score of 5.9 was published on 2026-10-05 via NVD.

vulnfeed aggregates 7640 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.