PT-2026-41827

CVE-2025-15609

·

Published

2026-05-19

·

Updated

2026-07-24

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Fortis for WooCommerce versions prior to 1.3.1
Description The Fortis for WooCommerce WordPress plugin may leak sensitive API keys to unauthenticated attackers. This exposure allows attackers to query the Fortis API and retrieve sensitive customer information, including personally identifiable information (PII) and past order details.
Recommendations Update to version 1.3.1 or later.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Related identifiers
CVE-2025-15609
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com