CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in impleCode eCommerce Product Catalog Plugin for WordPress.This issue affects eCommerce Product Catalog Plugin for WordPress: from n/a through 3.3.26.
Explanation of Vulnerability in Simple Terms
The eCommerce Product Catalog Plugin for WordPress versions up to 3.3.26 exposes sensitive information that can be accessed over the network without authentication. An attacker can retrieve this data directly, potentially including product details, pricing, or other catalog information not intended for public access. Update to a version newer than 3.3.26 to resolve this issue.
What an attacker can do
Read sensitive product catalog data without logging in.
Potential impact on your site
Confidential product information, pricing, or catalog data may be exposed to unauthorized visitors.
Conditions required to exploit
Network access to the WordPress site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
