CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information Into Sent Data vulnerability in vanquish WooCommerce Orders & Customers Exporter woocommerce-orders-customers-exporter allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce Orders & Customers Exporter: from n/a through <= 5.0.
Explanation of Vulnerability in Simple Terms
WooCommerce Orders & Customers Exporter versions 5.0 and earlier contain an information disclosure vulnerability. An unauthenticated attacker can read sensitive data over the network without user interaction. The vulnerability exposes confidential information that should be restricted to authorized users only.
What an attacker can do
Read sensitive order and customer data without authentication.
Potential impact on your site
Customer and order information may be exposed to unauthorized parties.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
