Medium severity5.3NVD Advisory· Published Jan 15, 2020· Updated Jun 17, 2026

CVE-2017-3211

Description

Yopify, an e-commerce notification plugin, up to April 06, 2017, leaks the first name, last initial, city, and recent purchase data of customers, all without user authorization.

Affected products

Yopify/Yopifyllm-create2 versions
<=2017-04-06+ 1 more
- (no CPE)range: <=2017-04-06
- cpe:2.3:a:yopify:yopify:*:*:*:*:*:*:*:*range: <=2017-04-06
Centire/Yopifyv5
Range: 2017-04-06

Patches

Vulnerability mechanics

References

blog.rapid7.com/2017/05/31/r7-2017-05-centire-yopify-information-disclosure-cve-2017-3211/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000