High · 7.5 CVE-2026-56065 EUVD-2026-116770GHSA-2rjp-mrq2-jh6r

WordPress Doofinder for WooCommerce plugin <= 2.17.2 - Sensitive Data Exposure vulnerability

Published Nov 4, 2026 · Updated Nov 4, 2026 · Assigned by Patchstack

Vendor: Doofinder Product: Doofinder for WooCommerce Category: Web / CMS

Description

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Doofinder Doofinder for WooCommerce doofinder-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Doofinder for WooCommerce: from n/a through 2.17.2.

Affected products

Vendor	Product	Affected	Fixed
Doofinder	Doofinder for WooCommerce	≤ 2.17.2	—

References

https://patchstack.com/database/wordpress/plugin/doofinder-for-woocommerce/vulnerability/wordpress-doofinder-for-woocommerce-plugin-2-17-2-sensitive-data-exposure-vulnerability?_s_id=cve vdb-entry