CVE-2017-3211

CVE-2017-3211 describes an information disclosure vulnerability in the Yopify e-commerce notification plugin, affecting versions up to April 6, 2017. This flaw allows unauthorized access to sensitive customer data, including first name, last initial, city, and recent purchase details. With a CVSS score of 5.3 (MEDIUM), the vulnerability is easily exploitable over the network with low attack complexity, potentially leading to a partial loss of confidentiality. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.