Title: New Version Security Issues
Last modified: March 14, 2025

---

# New Version Security Issues

 *  Resolved [mailsupportca](https://wordpress.org/support/users/mailsupportca/)
 * (@mailsupportca)
 * [1 year, 2 months ago](https://wordpress.org/support/topic/new-version-security-issues/)
 * With the latest 1.7.2 version. You have changed the folder where the uploaded
   files will be stored to wau-uploads. There are 2 main issues that arised:
    1. Some files that were uploaded and ended up in wau-uploads folder are not accessible
       from order page download link, it shows “Unauthorized Access”. Issue is happening
       in your wau_secure_file_download() and If the nonce is missing or invalid, it
       immediately calls `wp_die()`, blocking access.
    2. PDF and some other files are still getting uploaded to the regular WordPress
       upload 2025 folder. Why? If you are making an upgrade why you left behind certain
       file formats. $allowed_types = apply_filters( ‘wau_allowed_file_types’, array(‘
       jpg’, ‘jpeg’, ‘png’, ‘gif’, ‘webp’ ) );
 * Please fix or revert back to the same old regular upload to WP Upload folder.
   Fix this asap because half of our files are sitting in WP Upload and the new 
   ones that are not accessible are going in WAU folder. Update asap.
    -  This topic was modified 1 year, 2 months ago by [mailsupportca](https://wordpress.org/support/users/mailsupportca/).

Viewing 4 replies - 1 through 4 (of 4 total)

 *  Plugin Author [Dhruvin](https://wordpress.org/support/users/dhruvin/)
 * (@dhruvin)
 * [1 year, 2 months ago](https://wordpress.org/support/topic/new-version-security-issues/#post-18366380)
 * Hello [@mailsupportca](https://wordpress.org/support/users/mailsupportca/),
 * We apologize for the inconvenience faced due to the upgrade.
    1. I tried replicating this at my end and it seems to be working fine
    2. Have you enabled other file types via some modifications? All files should go
       in the custom folder.
 * To debug issues you are facing, can you please create a ticket [here](https://wordpress.org/support/topic/new-version-security-issues/support@imaginatesolutions.freshdesk.com?output_format=md)
   so we can quickly resolve them.
 * Best Regards,
   Dhruvin Shah
 *  [mmartbg](https://wordpress.org/support/users/mmartbg/)
 * (@mmartbg)
 * [1 year, 2 months ago](https://wordpress.org/support/topic/new-version-security-issues/#post-18372262)
 * Hi all,
 * Since the last update, we also have the same “Unauthorized Access” problem. Our
   clients confirmed that they are uploading their files correctly, but we can’t
   access them. I hope that this problem will be solved soon, because this is causing
   us serious performance difficulties.
 *  Thread Starter [mailsupportca](https://wordpress.org/support/users/mailsupportca/)
 * (@mailsupportca)
 * [1 year, 2 months ago](https://wordpress.org/support/topic/new-version-security-issues/#post-18372573)
 * [@dhruvin](https://wordpress.org/support/users/dhruvin/) No. I did not enable
   any other files. The plugin always had pdf, jpeg and other files type enabled.
   All use to be saved in regular WP Upload folder. With the new security pdf gets
   saved in WP Upload whereas jpeg are getting saved in WAU-Upload folder – that
   is not accessible, meaning the file when clicked on the order page says “Unauthorized
   Access”. Also before under order page, it use to provide you complete link to
   download these files such as wp-content/uploads/2025/01/newfile.jpg now it only
   says newfile.jpg with a link.
    -  This reply was modified 1 year, 2 months ago by [mailsupportca](https://wordpress.org/support/users/mailsupportca/).
 *  Plugin Author [Dhruvin](https://wordpress.org/support/users/dhruvin/)
 * (@dhruvin)
 * [1 year, 2 months ago](https://wordpress.org/support/topic/new-version-security-issues/#post-18372776)
 * Hello [@mailsupportca](https://wordpress.org/support/users/mailsupportca/) & 
   [@mmartbg](https://wordpress.org/support/users/mmartbg/) ,
 * We have just released an update to the plugin that should resolve this issue.
 * Please update and let me know if you are still facing issues.
 * Best regards
   Dhruvin

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘New Version Security Issues’ is closed to new replies.

 * ![](https://ps.w.org/woo-addon-uploads/assets/icon-256x256.png?rev=2776512)
 * [File Uploads Addon for WooCommerce](https://wordpress.org/plugins/woo-addon-uploads/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/woo-addon-uploads/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/woo-addon-uploads/)
 * [Active Topics](https://wordpress.org/support/plugin/woo-addon-uploads/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/woo-addon-uploads/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/woo-addon-uploads/reviews/)

## Tags

 * [unauthorized access](https://wordpress.org/support/topic-tag/unauthorized-access/)

 * 4 replies
 * 3 participants
 * Last reply from: [Dhruvin](https://wordpress.org/support/users/dhruvin/)
 * Last activity: [1 year, 2 months ago](https://wordpress.org/support/topic/new-version-security-issues/#post-18372776)
 * Status: resolved