Vulnerability Description
The Comment Edit Core – Simple Comment Editing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.0 via the 'ajax_get_comment' function. This makes it possible for unauthenticated attackers to extract sensitive data including user IDs, IP addresses, and email addresses.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://plugins.trac.wordpress.org/browser/simple-comment-editing/trunk/includes
- https://plugins.trac.wordpress.org/changeset/3392054/
- https://www.wordfence.com/threat-intel/vulnerabilities/id/4f954b02-b636-438b-a4b
FAQ
What is CVE-2025-12681?
CVE-2025-12681 is a vulnerability with a CVSS score of 5.3 (MEDIUM). The Comment Edit Core – Simple Comment Editing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.0 via the 'ajax_get_comment' function. Thi...
How severe is CVE-2025-12681?
CVE-2025-12681 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-12681?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.