CVE-2025-9987
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
The Broadstreet plugin for WordPress in all versions up to and including 1.53.1 is vulnerable to Sensitive Information Exposure via the get_sponsored_meta() AJAX action. An authenticated attacker with subscriber-level access or higher can extract data from password-protected and private business details.
Risk Assessment
A low-privileged user can access confidential business data, potentially compromising privacy and information security. This may lead to data leakage and legal consequences.
Recommendation
Update the Broadstreet plugin to a version newer than 1.53.1. Until then, consider restricting access to the get_sponsored_meta() AJAX action or disabling the plugin.
Other vulnerabilities in Broadstreet
See all- CVE-2025-9989Medium
The Broadstreet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to and including 1.53.1 due to insufficient input sanitization and output escaping. This allows authenticated attackers with administrator-level permissions or higher to inject arbitrary web scripts that execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html is disabled.
- CVE-2025-9988Medium
The Broadstreet plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the create_advertiser AJAX action in all versions up to, and including, 1.53.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create advertisers.
Original NVD description (English source)
The Broadstreet plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.53.1 via the get_sponsored_meta() AJAX action. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract data from password protected and private business details.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS