VULNERABILITY INTELLIGENCE

CVE-2025-15609

CVSS score7.5 HIGH

EPSS probability0.40%

CISA KEVNot currently listed

Published2026-05-19

Last modified2026-07-24

Description

The Fortis for WooCommerce WordPress plugin before 1.3.1 may leak sensitive API keys to unauthenticated attackers, allowing them to query Fortis' API and retrieve sensitive customer information, like past orders, PII, etc.