plugin

Korea For Woocommerce Vulnerabilities

2 known security issues reported for the Korea For Woocommerce WordPress plugin. Most recent disclosed Feb 3, 2025.

1 medium

Running Korea For Woocommerce on your site? Check whether your installed version is affected.

Scan your site free

Korea for WooCommerce [korea-for-woocommerce] < 1.1.12

unknown

[en] Insertion of Sensitive Information Into Sent Data vulnerability in GREYS Korea for WooCommerce allows Retrieve Embedded Sensitive Data. This issue affects Korea for WooCommerce: from n/a through 1.1.11.

Affected:
up to 1.1.12
Fixed in:
1.1.12
Disclosed:
Feb 3, 2025

CVE-2025-24639 on NVD →

Korea for WooCommerce <= 1.1.11 - Authenticated (Subscriber+) Sensitive Information Exposure

medium

The Korea for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.11. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract sensitive user or configuration data.

CVSS:
6.5
Affected:
up to 1.1.11
Fixed in:
1.1.12
Disclosed:
Jan 6, 2025

CVE-2025-24639 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database