The eCommerce Product Catalog Plugin for WordPress is a plugin for websites using the WordPress content management system. Unfortunately, up to version 3.3.27 (not including 3.3.27), this plugin has a vulnerability that allows unauthenticated attackers to access sensitive information. This includes full product information that could be obtained by importing or exporting CSV (comma-separated values) files.