eCommerce Product Catalog < 3.3.27 - Sensitive Information Exposure via CSV Files

2024-01-0500:00:00

wpscan.com

ecommerce

product catalog

wordpress

sensitive information exposure

csv files

vulnerability

import

export

unauthenticated attackers

sensitive data

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

37.2%

JSON

Description The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to 3.3.27 (exclusive) via import and export CSV files. This makes it possible for unauthenticated attackers to extract sensitive data including full product information.