CVE-2025-2252
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Mar 25, 2025
Updated: Mar 27, 2025
CWE ID 200
Summary
CVE-2025-2252 is a vulnerability affecting the Easy Digital Downloads plugin for WordPress, specifically versions up to and including 3.3.6.1. This issue exposes sensitive information through the edd_ajax_get_download_title() function, enabling unauthenticated attackers to obtain private post titles of downloads. The impact of this vulnerability is considered minimal as private post titles do not typically contain sensitive data, but it is still crucial to apply the necessary patch or update to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.