CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder allows Retrieve Embedded Sensitive Data.This issue affects ShopBuilder – Elementor WooCommerce Builder Addons: from n/a through <= 3.2.4.
Explanation of Vulnerability in Simple Terms
ShopBuilder for Elementor contains a flaw that exposes sensitive information to unauthenticated attackers over the network. The vulnerability requires no user interaction and affects all versions up to 3.2.4. An attacker can read non-public data without authentication, though they cannot modify site content or disrupt service.
What an attacker can do
Read sensitive information from the site without logging in.
Potential impact on your site
Confidential data may be exposed to anyone on the internet; update the plugin immediately.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
