CVE Catalog
CVE-2025-15609
HighSummary
The Fortis for WooCommerce plugin before version 1.3.1 may leak sensitive API keys to unauthenticated attackers, allowing them to query Fortis' API and retrieve sensitive customer information, such as past orders and PII.
Risk Assessment
The exposure of API keys could lead to customer data breaches, posing a serious threat to the privacy and security of the organization.
Recommendation
It is recommended to update the Fortis plugin to version 1.3.1 or later to mitigate this vulnerability.
Original NVD description (English source)
The Fortis for WooCommerce WordPress plugin before 1.3.1 may leak sensitive API keys to unauthenticated attackers, allowing them to query Fortis' API and retrieve sensitive customer information, like past orders, PII, etc.