Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-2942

The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title (such as from draft and private posts) via an unauthenticated AJAX action, allowing attackers to retrieve such information

Published

2025-07-11T06:15:22.977

Last Modified

2025-07-17T00:59:53.223

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application tychesoftwares order_delivery_date_for_woocommerce < 12.6.0 Yes
References