Aller au contenu
Se connecter
4.3 Moyenne

CVE-2025-2942 The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title (such as from draft and private…

Description

The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title (such as from draft and private posts) via an unauthenticated AJAX action, allowing attackers to retrieve such information

Produits et versions touchés

Produit Versions touchées Corrigé en
Order Delivery Date 2.0 2.0 → < 12.6.0 12.6.0

Autres CVE de Order Delivery Date

Les 3 CVE de Order Delivery Date →
CVE-2025-2929 The Order Delivery Date WordPress plugin before 12.4.0 does not sanitise and escape a parameter before outputting it… 7.1 Élevée CVE-2025-2907 The Order Delivery Date WordPress plugin before 12.3.1 does not have authorization and CSRF checks when importing… 9.8 Critique
Suivre cette CVE