CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
The Product Table for WooCommerce by CodeAstrology (wooproducttable.com) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.1 via the var_dump_table parameter. This makes it possible for unauthenticated attackers var data.
Explanation of Vulnerability in Simple Terms
Product Table for WooCommerce versions up to 3.5.1 lack proper authorization checks, allowing unauthenticated attackers to read sensitive data. An attacker can access information without logging in or requiring user interaction. Site administrators should update to a version newer than 3.5.1 immediately.
What an attacker can do
Read sensitive data from the plugin without authentication.
Potential impact on your site
Unauthorized visitors can access sensitive information exposed by the plugin.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
