Plugin icon

Product Attachment for WooCommerce

woo-product-attachment

Vulnerabilities:

5

Last Updated:

October 14, 2026

Active Installs:

6000

Published
Title
Fixed in
CVSS
Published
2026-09-01
Title
Product Attachment for WooCommerce <= 2.3.3 - Unauthenticated Information Exposure
Fixed in
Fixed in 2.3.5
CVSS
5.3 (medium)
Published
2026-07-21
Title
WooCommerce Product Attachment < 2.3.3 - Unauthenticated Arbitrary Media Download
Fixed in
Fixed in 2.3.3
CVSS
5.3 (medium)
Published
2023-08-11
Title
WooCommerce Product Attachment < 2.2.0 - Checkout Attachements Update via CSRF
Fixed in
Fixed in 2.2.0
CVSS
4.3 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.1.8
CVSS
6.1 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 2.1.3
CVSS
4.3 (medium)