Directsoftware - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2025-02-28.

Products

• Order Attachments For Woocommerce - 2 CVEs

Newest CVEs of Directsoftware

• CVE-2024-13638 - CVSS 7.5 (high), 2025-02-28: The Order Attachments for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.5.1 via the…
• CVE-2024-9756 - CVSS 4.3 (medium), 2024-10-12: The Order Attachments for WooCommerce plugin for WordPress is vulnerable to unauthorized limited arbitrary file uploads due to a missing capability check on…