4.3 Medium

CVE-2025-64267 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPSwings WooCommerce…

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPSwings WooCommerce Ultimate Points And Rewards woocommerce-ultimate-points-and-rewards allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce Ultimate Points And Rewards: from n/a through <= 2.10.2.

Affected products and versions

Product	Affected versions	Fixed in
WooCommerce Ultimate Points And Rewards 2.10	earliest → 2.10.2	No fix stated

Do you use WooCommerce Ultimate Points And Rewards?

Track this CVE Watch WooCommerce Ultimate Points And Rewards Check my SBOMs

www.cveye.io/en/cve/CVE-2025-64267

Timeline

Published November 13, 2025
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE