VULNERABILITY INTELLIGENCE

CVE-2025-2942

CVSS score4.3 MEDIUM
EPSS probability0.30%
CISA KEVNot currently listed
Published2025-07-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Description

The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title (such as from draft and private posts) via an unauthenticated AJAX action, allowing attackers to retrieve such information

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references