Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-39542 EUVD-2026-20197GHSA-vv3p-7ggx-8fch

WordPress Doofinder for WooCommerce plugin <= 2.10.13 - Sensitive Data Exposure vulnerability

Published Apr 8, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Vendor: Doofinder Product: Doofinder for WooCommerce Category: Web / CMS

Description

Insertion of Sensitive Information Into Sent Data vulnerability in Doofinder Doofinder for WooCommerce doofinder-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Doofinder for WooCommerce: from n/a through <= 2.10.13.

Affected products

VendorProductAffectedFixed
Doofinder Doofinder for WooCommerce ≤ 2.10.13 —

References