The Barcode Generator for WooCommerce plugin (versions up to 2.0.2) contains a vulnerability identified as CVE-2025-24597, which allows an attacker with low privileges to insert sensitive information into data sent by the plugin. This could lead to unauthorized retrieval of embedded sensitive data. The CVSS 3.1 vector indicates network attack vector, low attack complexity, privileges required, no user interaction, unchanged scope, high confidentiality impact, no integrity or availability impact. No vendor advisory or patch information is currently available.

Successful exploitation of this vulnerability could lead to unauthorized disclosure of sensitive information embedded in data sent by the plugin. This impacts confidentiality but does not affect integrity or availability. The medium severity score reflects the potential for sensitive data exposure with relatively low attack complexity but requiring some privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit privileges to trusted users and monitor for suspicious activity related to the plugin. Avoid exposing the plugin's data transmission channels to untrusted networks where possible.