CVE-2026-114173
CVE-2026-114173
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded in public storefront pages. An unauthenticated threat actor could read product passwords and private product metadata from an affected store.
CVSS 5.3 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
ortto
- Versions
- ≥ 0, < 1.0.25: Affected (semver)
Update to 1.0.25