MEDIUMCVSS v3.1 5.3Vulnerability
CVE-2026-114173
The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded in public storefront pages. An unauthenticated threat actor could read product passwords and private product metadata from an affected store.
Properties
- Severity
- MEDIUM
- Nvd fetched at
- 2026-10-29T03:46:53.555909+00:00
- Cvss severity
- MEDIUM
- Cvss score
- 5.3
- Retrieved at
- 2026-10-29T03:47:35+00:00
- Score
- 5.3
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-114173
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- First seen by Signal
- 2026-10-29T03:47:35+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Published at
- 2026-10-29T02:16:50.187
- Last modified
- 2026-10-29T02:16:50.187
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph