CVE-2026-56065

16th percentile - higher than 16% of all known CVEs

The Doofinder for WooCommerce plugin up to 2.17.2 inserts sensitive information into an externally accessible file or directory, allowing retrieval of embedded sensitive data. The issue affects versions from n/a through 2.17.2.

An attacker could gain access to sensitive data such as API keys or configuration details, potentially leading to further compromise of the store. This may breach the confidentiality of organizational data.

Update the Doofinder for WooCommerce plugin to a version later than 2.17.2. Verify that sensitive files are not publicly accessible and revoke any exposed keys if necessary.