Barcode Generator for WooCommerce – Show barcodes on products, orders, invoices and other pages <= 2.0.2 - Authenticated (Subscriber+) Sensitive Information Disclosure
2024-12-26 00:00
Kévin Mosbahi (Mika)Strategic Overview
StatusPatched in 2.0.3
Affected PluginBarcode Generator for WooCommerce – Show barcodes on products, orders, invoices and other pages
Affected Version
<= 2.0.2CVSS6.5Medium
CVE
CVE-2025-24597Vulnerability Overview
The Barcode Generator for WooCommerce – Show barcodes on products, orders, invoices and other pages plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract sensitive user or configuration data.
Technical Analysis
REMEDIATION: Update to version 2.0.3, or a newer patched version --- IDENTIFIER: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C