Read the docs

Directsoftware

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Directsoftware records in CISA KEV

No Directsoftware vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Order Attachments For Woocommerce 2 records LOW

Records

2 records in Order Attachments For Woocommerce · all components

TI-2024-12677 CVE-2024-13638 · GHSA-2559-vqhj-7wfx

Information disclosure in sldesignpl Order Attachments for WooCommerce

Priority LOW 33

The Order Attachments for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.5.1 via the 'uploads' directory.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00474 Published 2025-02-28 No fix listed CWE-200
TI-2024-09053 CVE-2024-9756 · GHSA-6j38-4772-mpr3

Missing authorization in sldesignpl Order Attachments for WooCommerce

Priority LOW 22

The Order Attachments for WooCommerce plugin for WordPress is vulnerable to unauthorized limited arbitrary file uploads due to a missing capability check on the wcoa_add_attachment AJAX action in versions 2.0 to 2.4.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0086 Published 2024-10-12 No fix listed CWE-862
Open these records in search →