CVE-2025-15488

creationtimestamp| type| source ---|---|--- 2026-03-26 09:05:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxar3brtl23...

CVE-2025-15488

The Responsive Plus WordPress plugin before 3.4.3 is vulnerable to arbitrary shortcode execution due to the software allowing unauthenticated users to execute the updateresponsivewoofreeshippingleftshortcode AJAX action that does not properly validate the contentrechdata parameter before processi...