The Ortto plugin for WordPress before version 1.0.25 fails to filter WooCommerce product data that it embeds in public storefront pages, which allows an unauthenticated threat actor to read product passwords and private metadata. This flaw results in the exposure of confidential store information and could enable further attacks that rely on stolen data. The weakness is classified as an information exposure vulnerability (CWE‑201).

WordPress sites that use the Canva Ortto plugin version 1.0.25 or earlier. Any store that embeds WooCommerce product data into publicly accessible pages is vulnerable.

The CVSS v3 score of 5.3 indicates moderate severity. The exploit potential is high because no authentication is required; an attacker only needs to request the affected public pages. EPSS information is not available and the vulnerability is not listed in CISA KEV, so the current risk level remains moderate. However, because the data exposed is sensitive, any unpatched site faces a realistic threat.