PT-2024-13691 · Woocommerce · Importify

Mika · Published 2024-12-09 · Updated 2024-12-09 · CVE-2023-49194

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Importify (Dropshipping WooCommerce) versions 1.0.0 through 1.0.4

Description The issue allows the retrieval of embedded sensitive data due to the insertion of sensitive information into debugging code.

Recommendations For versions 1.0.0 through 1.0.4, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-215

Related Identifiers

CVE-2023-49194

Affected Products

Importify

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-49194 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/importify/vulnerability/wordpress-importify-dropshipping-woocommerce-plugin-1-0-4-sensitive-data-exposure-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1866107129540776297 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/importify/vulnerability/wordpress-importify-dropshipping-woocommerce-plugin-1-0-4-sensitive-data-exposure-vulnerability?_s_id=cve · Note