CVE-2026-61945

MEDIUM

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in MultiVendorX WooCommerce Product Stock Alert allows Retrieve Embedded Sensitive Data. This issue affects WooCommerce Product Stock Alert: from n/a through 3.0.6.

StatusDeferred

설명

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in MultiVendorX WooCommerce Product Stock Alert allows Retrieve Embedded Sensitive Data.

This issue affects WooCommerce Product Stock Alert: from n/a through 3.0.6.

Score Summary

CVSS Score: 6.5
Version: 3.1
VPI: 65
Why this VPI (explainable, experimental)
VPI breakdown
Impact 65.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 65.00
VPI formula vpi-v1
EPSS: 0.2%
(상위 11.6%)
Attack Vector: Network
Low Complexity
Low Privileges
No User Interaction
Scope Unchanged
High Confidentiality Impact
No Integrity Impact
No Availability Impact

Details

Published: 07/23/2026(2 days ago)
Modified: 07/23/2026(2 days ago)
Source: NVD

CWE Weakness Classification

CWE-497
NVD
Secondary

References (1)

NVD
https://patchstack.com/database/wordpress/plugin/woocommerce-product-stock-alert/vulnerability/wordpress-woocommerce-product-stock-alert-plugin-3-0-6-sensitive-data-exposure-vulnerability?_s_id=cve

목록으로

Dashboard

Vulnerabilities

Impact	65.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	65.00