high7.5
CVE-2025-15609
The Fortis for WooCommerce WordPress plugin before 1.3.1 may leak sensitive API keys to unauthenticated attackers, allowing them to query Fortis' API and retri…
Impact
The Fortis for WooCommerce WordPress plugin before 1.3.1 may leak sensitive API keys to unauthenticated attackers, allowing them to query Fortis' API and retrieve sensitive customer information, like past orders, PII, etc.
Affected products
| Product | Affected versions |
|---|---|
| Fortis For WooCommerce WordPress Plugin | before 1.3.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.