CVE-2025-12681 - Comment Edit Core – Simple Comment Editing <= 3.1.0 - unauthenticated sensitive ...

CVE-2025-12681 - Comment Edit Core – Simple Comment Editing <= 3.1.0 - unauthenticated sensitive ...

CVE ID : CVE-2025-12681 Published : Nov. 13, 2025, 8:15 a.m. | 1 hour, 7 minutes ago Description : The Comment Edit Core – Simple Comment Editing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.0 via the 'ajax_get_comment' function. This makes it possible for unauthenticated attackers to extract sensitive data including user IDs, IP addresses, and email addresses. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
Published
Nov. 13, 2025
Affected Product: WordPress