Skepra

Skepra / Web recovery & resilience

Pinterest for WooCommerce 1.5.2-1.5.4: private product data exposure.

Through October 2026 WooCommerce published three Pinterest for WooCommerce releases fixing a data-exposure issue affecting password-protected products.

Ask whether this applies to your site

What was published

Password-protected products and their variations were included in the store's Pinterest catalog feed, and their Rich Pins showed product details to people without the password. Diagnostics and debug logs also recorded customer and order details, account credentials, and raw Pinterest API responses.

Affected versions

Pinterest for WooCommerce versions prior to 1.5.4.

How to check if this applies to your site

Only relevant if your WooCommerce store uses the Pinterest for WooCommerce plugin and sells password-protected products. Check the plugin version in wp-admin → Plugins; if it is below 1.5.4, update it.