CVE-2026-81774

Unauthenticated Sensitive Data Exposure in WooCommerce Product Attachment <= 2.3.3 versions.

Credits

Jakub Herman | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/woo-product-attachment/vulnerability/wordpress-woocommerce-product-attachment-plugin-2-3-3-sensitive-data-exposure-vulnerability?_s_id=cve