CVE-2024-4213CWE-922

Shopping Cart & eCommerce Store <= 5.6.4 - Sensitive Information Exposure

Medium · published May 10, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
41.7
In the wild
Unconfirmed
What it is

The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.6.4 via the order report functionality. This makes it possible for unauthenticated attackers to extract sensitive data including order details such as payment details, addresses and other PII.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00496 · 41.7th percentile
Weakness
CWE-922 · Insecure Storage of Sensitive Information
Published
2024-05-10T21:32Z
EPSS history
Timeline
  • 10 MAY 21:32Z
    Shopping Cart & eCommerce Store <= 5.6.4 - Sensitive Information Exposure
    cvelistv5