CVE-2025-24582

MEDIUM5.3

Public PoC

Description

Insertion of Sensitive Information Into Sent Data vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Retrieve Embedded Sensitive Data.This issue affects 12 Step Meeting List: from n/a through <= 3.16.5.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Affected products

AA Web Servant / 12 Step Meeting List0 – 3.16.5

Exploits & PoCs

nuclei12 Step Meeting List < 3.16.6 - Unauthenticated Sensitive Information Exposureby pussycat0x

References

MISChttps://patchstack.com/database/Wordpress/Plugin/12-step-meeting-list/vulnerability/wordpress-12-step-meeting-list-plugin-3-16-5-sensitive-data-exposure-vulnerability?_s_id=cve