CyberRota Analysis
AI-GeneratedThe Extra Product Options Builder for WooCommerce plugin prior to version 1.2.176 is vulnerable as it fails to verify user permissions for accessing customer-uploaded files, allowing unauthenticated users to retrieve these files if they know the stored name. This vulnerability primarily affects web servers that enforce deny-all rules, such as Apache, potentially leading to unauthorized file disclosure. Organizations using this plugin on affected platforms should prioritize patching to mitigate the risk of sensitive data exposure.
Original NVD Description
The Extra Product Options Builder for WooCommerce WordPress plugin before 1.2.176 does not verify that the requester is entitled to a customer-uploaded file before serving it, allowing unauthenticated users who obtain a file's stored name to retrieve it. The Extra Product Options Builder for WooCommerce WordPress plugin before 1.2.176 writes a deny-all rule into its upload directories, so the disclosure only crosses a boundary on web servers that honour it, such as Apache. Where it is ignored, as on a default nginx setup, the same files are already served at their direct URL and the endpoint exposes nothing further.