Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-15609

Fortis For WooCommerce < 1.3.1 - Sensitive API Key Disclosure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Fortis for WooCommerce WordPress plugin before 1.3.1 may leak sensitive API keys to unauthenticated attackers, allowing them to query Fortis' API and retrieve sensitive customer information, like past orders, PII, etc.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Fortis for WooCommerce

Default version status: unaffected

  • 0 to < 1.3.1affected

References