Sensitive Data Exposure in Vanquish WooCommerce Orders & Customers Exporter
CVE-2025-48331

7.5HIGH

Key Information:

Vendor

WordPress
Status
WooCommerce Orders & Customers Exporter
Vendor
CVE Published:
30 May 2025

What is CVE-2025-48331?

The Vanquish WooCommerce Orders & Customers Exporter plugin for WordPress has a vulnerability that allows the retrieval of embedded sensitive data in exported orders and customer information. Versions from n/a up to 5.0 are affected by this issue, which exposes sensitive information to unauthorized users. This highlights the importance of using updated and secure plugins to protect customer data and maintain the integrity of online transactions.

Affected Version(s)

WooCommerce Orders & Customers Exporter <= 5.0

References

https://patchstack.com/database/wordpress/plugin/woocomme...
vdb-entry

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

0xd4rk5id3 (Patchstack Alliance)
.
CVE-2025-48331 : Sensitive Data Exposure in Vanquish WooCommerce Orders & Customers Exporter