CVE-2024-32811 MEDIUM

CVE-2024-32811: WordPress USPS Shipping for WooCommerce – Live Rates plugin <= 1.9.4 - Sensitive Data Exposure via Log File vulnerability

Vendor Octolize
Product USPS Shipping for WooCommerce – Live Rates
Weakness CWE-532 · Sensitive info in logs
Published June 9, 2024
Last update April 28, 2026
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Insertion of Sensitive Information into Log File vulnerability in Octolize USPS Shipping for WooCommerce – Live Rates.This issue affects USPS Shipping for WooCommerce – Live Rates: from n/a through 1.9.4.

Explanation of Vulnerability in Simple Terms

02Summary

The USPS Shipping for WooCommerce plugin versions up to 1.9.4 expose sensitive information in logs or error messages accessible without authentication. An attacker can read this data over the network without needing to log in or interact with a user. The exposure is limited to confidentiality; the plugin's core functionality remains intact.

What an attacker can do

03Attacker Capabilities

Read sensitive information exposed by the plugin without logging in.

Potential impact on your site

04Site Impact

Customer or shipping data may be exposed to unauthenticated visitors if logs are accessible.

Conditions required to exploit

05Prerequisites

Network access to the site; no authentication or user interaction required.

Key dates

06Disclosure timeline

June 9, 2024 CVE published
April 28, 2026 Record updated

Related vulnerabilities

08Related CVE

CVE-2024-25095 WordPress Easy Forms for Mailchimp plugin <= 6.9.0 - Sensitive Data Exposure via Log File vulnerability CVE-2024-37930 WordPress SmartMag theme < 10.1.0 - Sensitive Data Exposure via Log File vulnerability CVE-2024-32513 WordPress Product Feed PRO for WooCommerce plugin <= 13.3.1 - Sensitive Data Exposure vulnerability CVE-2023-52143 WordPress WP Stripe Checkout Plugin <= 1.2.2.37 is vulnerable to Sensitive Data Exposure CVE-2024-31249 WordPress Subscribe To Comments Reloaded plugin <= 220725 - Sensitive Data Exposure vulnerability