logo

Database

Woocommerce Secret Key

Description

The source code repository contains sensitive information: WooCommerce Secret Key

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches WooCommerce Secret Key patterns in source code and configuration files

Vulnerable code example

WOOCOMMERCE_CONSUMER_SECRET=cs_31aa69a7ee727019b898cbc861ec3d764e4173fc
wcapi = API(url="https://shop.example.com", consumer_key="ck_2e5f12aa8cf5646edc42f0e73861f94b8302a4ad", consumer_secret="cs_28acd8a8551d9c4fb5db07024924111b95b008e5", version="wc/v3")
const api = new WooCommerceRestApi({
  url: 'https://shop.example.com',
  consumerKey: 'ck_2e5f12aa8cf5646edc42f0e73861f94b8302a4ad',
  consumerSecret: 'cs_31aa69a7ee727019b898cbc861ec3d764e4173fc',
});
curl https://shop.example.com/wp-json/wc/v3/products -u ck_2e5f12aa8cf5646edc42f0e73861f94b8302a4ad:cs_28acd8a8551d9c4fb5db07024924111b95b008e5