CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information Into Sent Data vulnerability in Greys Korea for WooCommerce korea-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Korea for WooCommerce: from n/a through <= 1.1.11.
Explanation of Vulnerability in Simple Terms
Korea for WooCommerce versions up to 1.1.11 contain an information disclosure vulnerability. An attacker with low-level site access can read sensitive data that should be restricted. The vulnerability does not require user interaction and affects confidentiality only. Update to a version newer than 1.1.11.
What an attacker can do
Read sensitive data restricted to higher-privilege users.
Potential impact on your site
Customer or user data may be exposed to low-privilege attackers; review access logs and audit data exposure.
Conditions required to exploit
Attacker must have a low-privilege account on the site (e.g., subscriber or customer role).
Key dates
External resources
Related vulnerabilities
