PT-2026-130567
CVE-2026-114173
·
Published
2026-10-29
·
Updated
2026-10-29
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded in public storefront pages. An unauthenticated threat actor could read product passwords and private product metadata from an affected store.
Found an issue in the description? Have something to add? Feel free to write us 👾