nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-49194 CVE-2023-49194
MEDIUM
WordPress Importify (Dropshipping WooCommerce) plugin <= 1.0.4 - Sensitive Data Exposure vulnerability
Record summary
CVE-2023-49194 has a selected CVSS score of 5.3 (medium).
Description
Insertion of Sensitive Information Into Debugging Code vulnerability in importify Importify (Dropshipping WooCommerce) importify allows Retrieve Embedded Sensitive Data.This issue affects Importify (Dropshipping WooCommerce): from n/a through <= 1.0.4.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Dec 9, 2024 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
Importify (Dropshipping WooCommerce)Browse importify / Importify (Dropshipping WooCommerce)importifyDefault status: unaffected | CVE List | Through 1.0.4 | affected |
dropshippingBrowse woocommerce / dropshippingDefault status: unknown | CVE List | Through 1.0.4 | affected |
References
3patchstack.comvdb entry
https://patchstack.com/database/Wordpress/Plugin/importify/vulnerability/wordpress-importify-dropshipping-woocommerce-plugin-1-0-4-sensitive-data-exposure-vulnerability?_s_id=cve patchstack.com
https://patchstack.com/database/wordpress/plugin/importify/vulnerability/wordpress-importify-dropshipping-woocommerce-plugin-1-0-4-sensitive-data-exposure-vulnerability?_s_id=cve