CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information Into Sent Data vulnerability in Coordinadora Mercantil S.A. Envíos Coordinadora Woocommerce coordinadora allows Retrieve Embedded Sensitive Data.This issue affects Envíos Coordinadora Woocommerce: from n/a through <= 1.1.32.
Explanation of Vulnerability in Simple Terms
Envíos Coordinadora Woocommerce versions up to 1.1.32 expose sensitive information through improper access controls. An unauthenticated attacker can read data that should be restricted, such as shipping details or customer information. The vulnerability requires no user interaction and is remotely exploitable over the network. Site owners should update to a version newer than 1.1.32.
What an attacker can do
Read sensitive shipping or customer data without authentication.
Potential impact on your site
Customer shipping details and related sensitive data may be exposed to unauthorized parties.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
