Beveiligingsadvies

CVE-2025-2942

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-07-11 06:00:02
Laatst bijgewerkt 2025-07-15 13:47:22
Toegewezen door WPScan
CVSS-score 4.3
Status PUBLISHED

Beschrijving

The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title (such as from draft and private posts) via an unauthenticated AJAX action, allowing attackers to retrieve such information