CVSS base score
What the vulnerability does
The Fortis for WooCommerce WordPress plugin before 1.3.1 may leak sensitive API keys to unauthenticated attackers, allowing them to query Fortis' API and retrieve sensitive customer information, like past orders, PII, etc.
Explanation of Vulnerability in Simple Terms
A vulnerability exists in Fortis for WooCommerce versions before 1.3.1. The specific attack vector and impact are not yet documented in available sources. Site administrators running affected versions should update to 1.3.1 or later. Additional technical details will be published as the vulnerability is analyzed.
What an attacker can do
Unknown; technical details not yet available.
Potential impact on your site
Sites running Fortis for WooCommerce < 1.3.1 may be at risk; update immediately.
Conditions required to exploit
Unknown; technical details not yet available.
Key dates
External resources
