Sensitive Data Exposure in UkrSolution Barcode Generator for WooCommerce
CVE-2025-24597

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Barcode Generator For WooCommerce
Vendor
CVE Published:
31 January 2025

What is CVE-2025-24597?

The UkrSolution Barcode Generator for WooCommerce has a vulnerability that allows for the retrieval of embedded sensitive data. This issue can impact users by exposing private information during data transmission, which could potentially lead to unauthorized data access. The vulnerability affects versions of the Barcode Generator for WooCommerce from n/a through 2.0.2. It is crucial for users of this plugin to address this issue promptly to safeguard their sensitive information.

Affected Version(s)

Barcode Generator for WooCommerce <= 2.0.2

References

https://patchstack.com/database/wordpress/plugin/embeddin...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mika (Patchstack Alliance)
.