CVE-2026-42725: WordPress Checkout Files Upload for WooCommerce plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in WP Wham Checkout Files Upload for WooCommerce checkout-files-upload-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Checkout Files Upload for WooCommerce: from n/a through <= 2.2.5.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-42725?
The severity of CVE-2026-42725 is medium, rated at 6.5 on the CVSS scale.
How do I fix CVE-2026-42725?
To fix CVE-2026-42725, update the WP Wham Checkout Files Upload for WooCommerce plugin to the latest version.
What type of vulnerability is CVE-2026-42725?
CVE-2026-42725 is classified as an Insecure Direct Object References (IDOR) vulnerability.
What software is affected by CVE-2026-42725?
CVE-2026-42725 affects the WP Wham Checkout Files Upload for WooCommerce plugin versions up to and including 2.2.5.
What is the risk associated with CVE-2026-42725?
The risk associated with CVE-2026-42725 is classified as a low to medium risk, indicated by a risk score of 40.