Information Disclosure Vulnerability in Ortto Plugin for WordPress

CVE-2026-114173

What is CVE-2026-114173?

The Ortto plugin for WordPress versions prior to 1.0.25 contains a serious information disclosure vulnerability. This flaw occurs due to the lack of proper filtering for WooCommerce product data embedded in publicly accessible storefront pages. As a result, unauthenticated attackers can potentially access sensitive product information, including product passwords and private metadata, exposing critical business data. Website administrators are advised to update the plugin to the latest version to mitigate this security risk.

References