CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information Into Sent Data vulnerability in WebFactory Order Export for WooCommerce order-export-and-more-for-woocommerce.This issue affects Order Export for WooCommerce: from n/a through <= 3.23.
Explanation of Vulnerability in Simple Terms
Order Export for WooCommerce versions up to 3.23 expose sensitive information through an information disclosure vulnerability. An unauthenticated attacker can access restricted data over the network without user interaction. The vulnerability stems from insufficient access controls on sensitive endpoints. Site administrators should update to a version newer than 3.23 immediately.
What an attacker can do
Read sensitive order or export data without authentication.
Potential impact on your site
Customer order data and export information may be exposed to unauthorized visitors.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
