CERT24GHSA-px8c-84hm-p82v: Exposure of sensitive WooCommerce data by the Ortto WordPress pluginLoading data…
CERT24Threat Observatory
Period

GHSA-px8c-84hm-p82v: Exposure of sensitive WooCommerce data by the Ortto WordPress plugin

Versions of the Ortto WordPress plugin before 1.0.25 did not filter WooCommerce product data embedded in public storefront pages. An unauthenticated threat actor could read product passwords and private product metadata from an affected store.

← Back to intelligence

GHSA-px8c-84hm-p82v: Exposure of sensitive WooCommerce data by the Ortto WordPress plugin

Versions of the Ortto WordPress plugin before 1.0.25 did not filter WooCommerce product data embedded in public storefront pages. An unauthenticated threat actor could read product passwords and private product metadata from an affected store.