high7.5

CVE-2026-81774

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dotstore WooCommerce Product Attachment woo-product-attachment allo…

Impact

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dotstore WooCommerce Product Attachment woo-product-attachment allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce Product Attachment: from n/a through 2.3.4.

Affected products

Product	Affected versions
WooCommerce Product Attachment: From N/A	through 2.3.4.

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

CWE-497

References

NVD record
CVE.org record
https://patchstack.com/database/wordpress/plugin/woo-product-attachment/vulnerability/wordpress-woocommerce-product-attachment-plugin-2-3-3-sensitive-data-exposure-vulnerability?_s_id=cve