WordPress Simple Shopping Cart Plugin Sensitive Information Exposure Vulnerability
Vulnerability
A vulnerability allowing sensitive information exposure has been identified in the WordPress Simple Shopping Cart plugin, affecting all versions through 5.1.2. The issue arises from the 'file_url' parameter, which can be exploited by unauthenticated attackers to access potentially sensitive information and download digital products without payment.
Impact
Exploitation of this vulnerability allows unauthorized users to access sensitive information and download digital products without payment.
Reproduction
The vulnerability can be reproduced by sending a request to a WordPress site with the Simple Shopping Cart plugin installed, using the 'file_url' parameter to request a digital product file. This can be done without authentication, and the product will be delivered via email after the download link is accessed.
Remediation
Users are advised to update the WordPress Simple Shopping Cart plugin to version 5.1.3 or later.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.