CVE-2025-15609
High
Published: 19 May 2026
Published
19 May 2026
Modified
19 May 2026
KEV Added
—
Patch
—
CVSS Score
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.0002
6.2th percentile
Risk Priority
15
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2025-15609 is a high-severity an unspecified weakness vulnerability. Its CVSS base score is 7.5 (High).
Operationally, ranked at the 6.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
NVD Description
The Fortis for WooCommerce WordPress plugin before 1.3.1 may leak sensitive API keys to unauthenticated attackers, allowing them to query Fortis' API and retrieve sensitive customer information, like past orders, PII, etc.
Deeper analysisAI
Automated synthesis unavailable for this CVE.
Details
- CWE(s)