CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2025-24582: WordPress 12 Step Meeting List plugin <= 3.16.5 - Sensitive Data Exposure vulnerability
5.3
CVSS
Description
Insertion of Sensitive Information Into Sent Data vulnerability in Code for Recovery 12 Step Meeting List allows Retrieve Embedded Sensitive Data. This issue affects 12 Step Meeting List: from n/a through 3.16.5.
Classification
CVE ID: CVE-2025-24582
CVSS Base Severity: MEDIUM
CVSS Base Score: 5.3
Affected Products
Vendor: Code for Recovery
Product: 12 Step Meeting List
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.72% (scored less or equal to compared to others)
EPSS Date: 2025-02-21 (when was this score calculated)