← Back

CVE-2025-2942

nvd nist
Published: Jul 11, 2025Modified: Jul 17, 2025

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Exploitability: 2.8 / Impact: 1.4
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title (such as from draft and private posts) via an unauthenticated AJAX action, allowing attackers to retrieve such information

Affected (1)

Tychesoftwares
1 product
Order Delivery Date For Woocommerce
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Order Delivery Date For Woocommerce
Before 12.6.0

References (2)

Source: contact@wpscan.com
ExploitThird Party Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
ExploitThird Party Advisory

Timeline

No history available yet.