Vulnerability Bulletins |
CVE-2025-2942 |
|
| Affected software | WORDPRESS |
| The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title (such as from draft and private posts) via an unauthenticated AJAX action, allowing attackers to retrieve such information | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2025-2942 | |