CVE-2026-73181
WordPress Extra Product Options & Add-Ons for WooCommerce plugin < 7.6 - Arbitrary File Download vulnerabilityUnauthenticated Arbitrary File Download in Extra Product Options & Add-Ons for WooCommerce < 7.6 versions.
We have discovered 7,058 live websites that are affected by CVE-2026-73181.
Common Weakness Enumeration
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Details
- Published - Aug 18, 2026
- Updated - Aug 18, 2026
Credits
- daroo | Patchstack Bug Bounty Program (finder)
CVE References
CWE References
CWE
Website Distribution by Country
Number of websites using CVE-2026-73181 United States | 1,867 websites |
 Germany | 645 websites |
 GB | 534 websites |
 Netherlands | 404 websites |
 France | 323 websites |
 Spain | 234 websites |
 Italy | 220 websites |
 Russia | 192 websites |
 Iran | 176 websites |
 Australia | 165 websites |
Website Distribution by TLD
Number of websites using CVE-2026-73181| .com | 2,823 websites |
| .co.uk | 408 websites |
| .nl | 376 websites |
| .de | 363 websites |
| .com.au | 175 websites |
| .ru | 165 websites |
| .it | 158 websites |
| .fr | 156 websites |
| .es | 115 websites |
| .net | 113 websites |
Vulnerable Versions
Vulnerable versions are highlighted in redWebsites affected by CVE-2026-73181
Top websites that are affected by CVE-2026-73181. Please click on the "Contact us" link to get more information.| Domain | Country | Rank | Contacts |
|---|---|---|---|
| **********.com | United States | **,*** | |
| **********.de | Germany | **,*** | |
| ***.*************.com | United States | ***,*** | |
| *******.com | United States | ***,*** | |
| ******.*****.gr | Germany | ***,*** | |
| *********.com | United States | ***,*** | |
| *************.com | United States | ***,*** | |
| ******.com | United States | ***,*** | |
| ***********.ir | Iran | ***,*** | |
| ************.com |  Switzerland | ***,*** |