CVE-2025-12525 — Locker Content <= 1.0.0 - Unauthenticated Information Exposure
The Locker Content plugin for WordPress is vulnerable to Sensitive Information Exposure in version 1.0.0 via the 'lockerco_submit_post' AJAX endpoint. This makes it possible for…
Published: 2025-11-25 · CVSS: 5.3 · CVSS 3.1
The Locker Content plugin for WordPress is vulnerable to Sensitive Information Exposure in version 1.0.0 via the 'lockerco_submit_post' AJAX endpoint. This makes it possible for unauthenticated attackers to extract content from posts that has been protected by the plugin.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7