PT-2025-17349 · WordPress+1 · Order Delivery Date+1

Erwan Lr · Published 2025-04-18 · Updated 2025-07-15 · CVE-2025-2942

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Order Delivery Date WordPress plugin versions prior to 12.6.0

Description: The Order Delivery Date WordPress plugin before version 12.6.0 discloses arbitrary post titles (including draft and private posts) through an unauthenticated AJAX action, potentially allowing attackers to retrieve this information.

Recommendations: Update the Order Delivery Date WordPress plugin to version 12.6.0 or later.

Exploit

Fix

Related Identifiers

CVE-2025-2942

Affected Products

Order Delivery Date

Order Delivery Date For Woocommerce

References · 9

• 🔥 https://wpscan.com/vulnerability/13a87567-2cf7-4bfb-8d63-a8e74950978f · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-2942 · Security Note
• https://osv.dev/vulnerability/CVE-2025-2942 · Vendor Advisory
• https://twitter.com/router_bugs/status/1913370557531516942 · Twitter Post
• https://t.me/cvenotify/129018 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1943632967256997915 · Twitter Post
• https://t.me/cvenotify/128492 · Telegram Post
• https://t.me/cvetracker/27531 · Telegram Post
• https://twitter.com/CVEnew/status/1943668143504920948 · Twitter Post