Directsoftware Order Attachments For Woocommerce
2 CVEs affecting Directsoftware Order Attachments For Woocommerce. Latest disclosed: 2025-02-28. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-13638 | Medium | 5.9 | 2025-02-28 | The Order Attachments for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.5.1 via the… |
CVE-2024-9756 | Medium | 4.3 | 2024-10-12 | The Order Attachments for WooCommerce plugin for WordPress is vulnerable to unauthorized limited arbitrary file uploads due to a missing capability check on th… |