Shipmondo WooCommerce Plugin Sensitive Data Exposure Vulnerability

A vulnerability allowing the unauthorized retrieval of sensitive embedded data has been identified in the Shipmondo shipping solution for WooCommerce, affecting versions through 5.0.3. This issue arises from improper handling of sensitive information, which could be accessed by users with customer privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, which may be used to exploit other weaknesses within the system.

Remediation

Users of the Shipmondo WooCommerce plugin should update to version 5.0.4 or later. Patchstack users can enable auto-update for vulnerable plugins.