CVE-2025-12525 — Vulnerability intelligence

appglut — Locker Content

Published: 2025-11-25T07:28:22.250Z

CVSS

5.3

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

The Locker Content plugin for WordPress is vulnerable to Sensitive Information Exposure in version 1.0.0 via the 'lockerco_submit_post' AJAX endpoint. This makes it possible for unauthenticated attackers to extract content from posts that has been protected by the plugin.

Sources

• CVE-2025-12525
• Original advisory
• Original advisory
• Original advisory
• CVE-2025-12525