CVE-2026-81280: CWE-201 Insertion of Sensitive Information Into Sent Data in UKR Solution Print Barcode Labels for your WooCommerce products/orders

This vulnerability (CWE-201) in the Print Barcode Labels for your WooCommerce products/orders plugin by UKR Solution allows sensitive subscriber data to be inserted into data sent by the plugin. The affected versions are up to 4.0.0, though exact affected versions are not explicitly stated. The CVSS 3.1 vector indicates network attack vector with low attack complexity, requiring privileges, no user interaction, and results in high confidentiality impact without affecting integrity or availability.

The vulnerability can lead to exposure of sensitive subscriber data, compromising confidentiality. There is no indication of impact on data integrity or system availability. This could potentially lead to privacy violations or unauthorized data disclosure if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor vendor communications for updates. Until a fix is available, limit plugin usage to trusted environments and restrict privileges as much as possible.