Sensitive Information Exposure in WordPress Simple Shopping Cart Plugin
CVE-2025-3529
8.2HIGH
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 23 April 2025
What is CVE-2025-3529?
The Simple Shopping Cart plugin for WordPress has a vulnerability that allows unauthenticated attackers to exploit the 'file_url' parameter, potentially exposing sensitive information. This flaw enables unauthorized users to view and download digital products without payment, compromising the integrity of eCommerce transactions and user data.
Affected Version(s)
WordPress Simple Shopping Cart * <= 5.1.2