https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T22:26:27.500775+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-285636 EUVD-2026-285636 2026-10-09T22:26:27.556750+00:00 EUVD-2026-285636 https://cve.radiocsirt.org/vuln/fkie_cve-2024-13638 fkie_cve-2024-13638 2026-10-09T22:26:27.556802+00:00

The Order Attachments for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.5.1 via the 'uploads' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads directory which can contain file attachments added to orders.

 https://cve.radiocsirt.org/vuln/ghsa-2559-vqhj-7wfx GHSA-2559-vqhj-7wfx 2026-10-09T22:26:27.556843+00:00

The Order Attachments for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.5.1 via the 'uploads' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads directory which can contain file attachments added to orders.