CVE-2025-2942 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title (such as from draft and private posts) via an unauthenticated AJAX action,…
Medium CVSS: 4.3

CVE-2025-2942

The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title (such as from draft and private posts) via an unauthenticated AJAX action, allowing attackers to retrieve such information
Vendor
Tychesoftwares
Product
Order Delivery Date For Woocommerce
CWE
NVD-CWE-noinfo
Yayın Tarihi
2025-07-11 06:15:22
Güncelleme
2025-07-17 00:59:53
Source Identifier
contact@wpscan.com
KEV Date Added
-

Kategoriler

NVD-CWE-noinfo Order Delivery Date For Woocommerce MEDIUM Tychesoftwares 2025

Referanslar

https://wpscan.com/vulnerability/13a87567-2cf7-4bfb-8d63-a8e74950978f/ https://wpscan.com/vulnerability/13a87567-2cf7-4bfb-8d63-a8e74950978f/