high
CVE-2026-56065
Doofinder Search and Discovery for WP & WooCommerce <= 2.17.2 writes sensitive data into an externally-accessible file inside its own plugin directory - an unauthenticated visitor retrieves it
- Severity
- high
- Affected product
- doofinder-for-woocommerce
- Affected versions
- doofinder-for-woocommerce ≤ 2.17.2
- Fixed in
- doofinder-for-woocommerce 2.17.3
- Detection basis
- Component version range
- Shipped rule
- doofinder-for-woocommerce: Doofinder Search and Discovery for WP & WooCommerce <= 2.17.2 writes sensitive data into an externally-accessible file inside its own plugin directory - an unauthenticated visitor retrieves it
- Added to NewScan
- 2026-11-04
- Detected by
- NewScan — free, self-hosted
How NewScan reports it
COMPONENT VERSION RANGE
NewScan fingerprints doofinder-for-woocommerce from its response and reports this CVE when the detected version falls inside the affected range below.
References
Scan for this yourself — local, in-band scanning is free.
Get NewScan (FREE) →Review the measured benchmark, then use the verified remediation process.