CVE-2025-2942 – WordPress Order Delivery Date Information Disclosure Vulnerability

CVE ID : CVE-2025-2942

Published : July 11, 2025, 6:15 a.m. | 1 hour, 58 minutes ago

Description : The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title (such as from draft and private posts) via an unauthenticated AJAX action, allowing attackers to retrieve such information

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…