CVE-2025-58656 - WordPress Estonian Shipping Methods for WooCommerce Plugin <= 1.7.2 - Sensitive Data Exposure Vulnerability

Back Back to CVE browser

MEDIUM

WordPress Estonian Shipping Methods for WooCommerce Plugin <= 1.7.2 - Sensitive Data Exposure Vulnerability

Published Sep 22, 2025

5.3

MEDIUM

CVSS 3.1

EPSS 0.29%

Description

Use of Hard-coded Credentials vulnerability in Risto Niinemets Estonian Shipping Methods for WooCommerce estonian-shipping-methods-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Estonian Shipping Methods for WooCommerce: from n/a through <= 1.7.2.

Affected products

Vendor Risto Niinemets Product Estonian Shipping Methods for WooCommerce Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=1.7.2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Risto Niinemets

Estonian Shipping Methods for WooCommerce

unaffected

Version	Status	Constraints
0	affected	<=1.7.2

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-798

Hard-coded Credentials

References (1)

https://patchstack.com/database/Wordpress/Plugin/estonian-shipping-methods-for-woocommerce/vulnerability/wordpress-estonian-shipping-methods-for-woocommerce-plugin-1-7-2-sensitive-data-exposure-vulnerability?_s_id=cve
vdb-entry

Link	Providers	Tags
https://patchstack.com/database/Wordpress/Plugin/estonian-shipping-methods-for-woocommerce/vulnerability/wordpress-estonian-shipping-methods-for-woocommerce-plugin-1-7-2-sensitive-data-exposure-vulnerability?_s_id=cve		vdb-entry