Is CVE-2025-15489 being exploited?

No public exploit is currently tracked.

How severe is CVE-2025-15489?

CVE-2025-15489 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2025-15489

Description

The Passster WordPress plugin before 4.2.24 does not handle input properly in an AJAX action, allowing unauthenticated users to retrieve the value of password protected content