Orta CVSS 5.3
CVE-2025-15489: CVE-2025-15489: hatalı yetkilendirme
Açıklama (NVD)
The Passster WordPress plugin before 4.2.24 does not handle input properly in an AJAX action, allowing unauthenticated users to retrieve the value of password protected content
Özet bilgiler
- CVSS v3.1
- 5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - EPSS
- %0,32 (yüzdelik 25)
- CWE
- CWE-863
- Yama
- Yok / bilinmiyor