A broken access control vulnerability in the Extra Product Options Builder for WooCommerce allows unauthenticated users to download private customer files, creating significant privacy and compliance risks.

The plugin fails to verify the requester's authorization before serving files uploaded by customers. An unauthenticated attacker can retrieve any file if they can guess or obtain the stored filename.

With a CVSS score of 7.5, this high-severity vulnerability directly threatens customer privacy. Unauthorized access to uploaded documents may expose sensitive personal information, leading to data breaches, potential regulatory fines, and loss of customer trust. The ease of exploitation makes this a significant concern for any e-commerce platform handling sensitive user data.

Immediate Action: Update the Extra Product Options Builder for WooCommerce plugin to version 1.2.176 or later to enforce proper file access controls.

Proactive Monitoring: Review application logs for unusual file retrieval requests, particularly those targeting directories where customer uploads are stored.

Compensating Controls: Configure web server rules to prevent direct access to upload directories and ensure proper directory indexing is disabled.

Public Exploit Available: Unknown.

This vulnerability is a major privacy concern. Organizations should update the plugin immediately and consider conducting a review of exposed file storage locations to ensure that sensitive customer data is not accessible without proper authentication.