PT-2026-41827 · Woocommerce · Fortios

Wpscan Team · Published 2026-05-19 · Updated 2026-05-19 · CVE-2025-15609

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Fortis for WooCommerce versions prior to 1.3.1

Description The Fortis for WooCommerce WordPress plugin may leak sensitive API keys to unauthenticated attackers. This exposure allows attackers to query the Fortis API and retrieve sensitive customer information, including personally identifiable information (PII) and past order details.

Recommendations Update to version 1.3.1 or later.

Exploit

Fix

Related Identifiers

CVE-2025-15609

Affected Products

Fortios

References · 6

• 🔥 https://wpscan.com/vulnerability/220f72ea-e3b4-44c9-8c9b-15662aebb6cb · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-15609 · Security Note
• https://twitter.com/CVEnew/status/2056670086539428303 · Twitter Post
• https://t.me/cveNotify/163978 · Telegram Post
• https://t.me/CVEtracker/54207 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2056676334223364465 · Twitter Post