CVE Catalog
CVE-2026-22334
HighCVSS 7.5Summary
The Woocommerce Book Price plugin versions up to 1.3 have a vulnerability that allows subscribers to download arbitrary files from the server.
Risk Assessment
An attacker could exploit this vulnerability to access sensitive files, potentially leading to data leaks and breaches of user privacy.
Recommendation
It is recommended to update the Woocommerce Book Price plugin to the latest version to mitigate this vulnerability.
Original NVD description (English source)
Subscriber Arbitrary File Download in Woocommerce Book Price <= 1.3 versions.