{
 "id": "WPSEC-2026-0662",
 "url": "https://wpsec.com/vuln/WPSEC-2026-0662/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-0662/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-0662/index.md",
 "title": "Pinterest for WooCommerce <= 1.5.1 - Unauthenticated Information Exposure of Password-Protected Products via Rich Pins Metadata",
 "description": "The Pinterest for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.5.1 due to the plugin not respecting product password protection when generating Rich Pins Open Graph metadata. This makes it possible for unauthenticated attackers to view the description, price, stock status and featured image of password-protected products from the product page's metadata without entering the password. Password-protected products were also included in the product catalog feed sent to Pinterest.",
 "plugin": {
  "slug": "pinterest-for-woocommerce",
  "name": "Pinterest for WooCommerce",
  "full_name": "Pinterest for WooCommerce",
  "wordpress_org": "https://wordpress.org/plugins/pinterest-for-woocommerce/",
  "advisories_url": "https://wpsec.com/vuln/plugin/pinterest-for-woocommerce/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/pinterest-for-woocommerce"
 },
 "type": "SENSITIVE DATA DISCLOSURE",
 "cwe": [
  "CWE-200"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 5.3,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "1.5.2",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 1.5.2"
  ]
 },
 "introduced_in": null,
 "fixed_in": "1.5.2",
 "remediation": "Update to 1.5.2 or later.",
 "fix_released": "2026-10-07T14:27:59+00:00",
 "published": "2026-10-08T14:54:41+00:00",
 "updated": "2026-10-07T18:24:42.096020+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-0662/",
  "https://plugins.svn.wordpress.org/pinterest-for-woocommerce/tags/1.5.2/",
  "https://wordpress.org/plugins/pinterest-for-woocommerce/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/pinterest-for-woocommerce",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Medium",
  "affected_versions": "Medium",
  "as_of": "2026-10-08"
 }
}