The Ortto plugin for WordPress versions before 1.0.25 improperly handled WooCommerce product data embedded in public storefront pages, allowing unauthenticated attackers to access product passwords and private metadata. This vulnerability could expose sensitive product information without requiring authentication.