File Uploads Addon for WooCommerce Sensitive Information Exposure Vulnerability

A vulnerability allowing sensitive information exposure has been identified in the File Uploads Addon for WooCommerce plugin, affecting all WordPress versions through 1.7.1. The issue arises from the 'uploads' directory, where unauthenticated attackers can access sensitive data, including customer-uploaded file attachments, stored insecurely in the /wp-content/uploads directory.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, such as private customer file uploads, which could be misused or cause harm to individuals or the organization.

Remediation

Users are advised to update the File Uploads Addon for WooCommerce to version 1.7.2 or a newer patched version.