CVE-2025-2881

MEDIUM

Developer Toolbar <= 1.0.3 - Unauthenticated Sensitive Information Exposure via phpinfo.php Script

Title source: llm
STIX 2.1

Description

The Developer Toolbar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.3 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed file.

References (3)

Core 3

Scores

CVSS v3 5.3
EPSS 0.0033
EPSS Percentile 24.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-200
Status published
Products (1)
bap22/Developer Toolbar < 1.0.3
Published Apr 12, 2025
Tracked Since Feb 18, 2026