Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 17:24:57 +0000 CVE-2026-16285 — WooCommerce Product Attachment < 2.3.3 - Unauthenticated Arbitrary Media Download https://cve.radiocsirt.org/vuln/cve-2026-16285 <p><strong>Affected:</strong> Unknown Product Attachment for WooCommerce</p> <p>The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID.</p> <p><strong>Affected:</strong> Unknown Product Attachment for WooCommerce</p> <p>The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID.</p> https://cve.radiocsirt.org/vuln/cve-2026-16285