Medium · 5.3 CVE-2023-49162 EUVD-2023-53167GHSA-4r95-c6hr-v2wx

WordPress BigCommerce Plugin <= 5.0.6 is vulnerable to Sensitive Data Exposure

Published Dec 21, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: BigCommerce Product: BigCommerce For WordPress Category: Web / CMS

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in BigCommerce BigCommerce For WordPress.This issue affects BigCommerce For WordPress: from n/a through 5.0.6.

Affected products

Vendor	Product	Affected	Fixed
BigCommerce	BigCommerce For WordPress	≤ 5.0.6	—

References

https://patchstack.com/database/vulnerability/bigcommerce/wordpress-bigcommerce-for-wordpress-plugin-5-0-6-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve vdb-entry