CVE Database /
CVE-2025-15033
CVE · Medium
CVE-2025-15033 — WooCommerce [woocommerce] < 10.4.3
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2025-15033
|
WooCommerce [woocommerce] < 10.4.3 |
Exposure of Sensitive Information to an Unauthorized Actor |
Medium
6.5
|
< 10.4.3
|
10.4.3 |
2025-12-22 |
—
|
CVE-2025-15033
A flaw in WooCommerce versions from 8.1 to 10.4.2 enables logged-in users to view order details of non-logged-in customers under specific site configurations. This issue was resolved in WooCommerce version 10.4.3 and all preceding affected versions, including 8.1.3 for the earliest vulnerable release. Earlier versions like 8.0 and below are not impacted by this vulnerability.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings