CVE Catalog
CVE-2026-73181
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk0.48%
40th percentile - higher than 40% of all known CVEs
Summary
Unauthenticated Arbitrary File Download vulnerability in Extra Product Options & Add-Ons for WooCommerce versions before 7.6. An attacker can download arbitrary files from the server.
Risk Assessment
Potential disclosure of sensitive data such as configuration files, user data, or source code.
Recommendation
Update the plugin to version 7.6 or later.
Original NVD description (English source)
Unauthenticated Arbitrary File Download in Extra Product Options & Add-Ons for WooCommerce < 7.6 versions.