Sensitive Data Exposure in Doofinder for WooCommerce by Doofinder

CVE-2026-56065

What is CVE-2026-56065?

A vulnerability exists in Doofinder for WooCommerce, allowing unauthorized retrieval of sensitive data through externally accessible files or directories. This exposure can lead to serious privacy concerns for users, particularly in e-commerce settings where personal and payment information is involved. The vulnerability affects versions up to and including 2.17.2, emphasizing the need for timely updates and system checks to mitigate risks associated with sensitive data loss.

References