CVE-2025-15609 — Fortis For WooCommerce < 1.3.1 - Sensitive API Key Disclosure

CVE-2025-15609

Fortis For WooCommerce < 1.3.1 - Sensitive API Key Disclosure PUBLISHED

Description (CNA)

The Fortis for WooCommerce WordPress plugin before 1.3.1 may leak sensitive API keys to unauthenticated attackers, allowing them to query Fortis' API and retrieve sensitive customer information, like past orders, PII, etc.

Affected (CNA)

Vendor / product	Versions
Unknown / Fortis for WooCommerce	affected 0 before 1.3.1

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/220f72ea-e3b4-44c9-8c9b-15662aebb6cb/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.