Fortis For WooCommerce < 1.3.1 - Sensitive API Key Disclosure
41Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 7.5epss 0.4%
exploitation probability
0.4%top 67% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
The Fortis for WooCommerce WordPress plugin before 1.3.1 may leak sensitive API keys to unauthenticated attackers, allowing them to query Fortis' API and retrieve sensitive customer information, like past orders, PII, etc.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Unknown · Fortis for WooCommercepublic PoCs found — 1
cve_referencewpscan.com/vulnerability/220f72ea-e3b4-44c9-8c9b-15662aebb6cb/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.