CVE-2026-78371

Name of the Vulnerable Software and Affected Versions File Uploads Addon for WooCommerce WordPress plugin versions prior to 1.7.6

Description An issue exists where the plugin fails to verify if the user requesting a customer-uploaded file is the original uploader. This allows unauthenticated attackers to download files uploaded by other customers if they can determine or guess the file name.

Recommendations Update the File Uploads Addon for WooCommerce WordPress plugin to version 1.7.6 or later.