{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-30T23:17:28.447","vulnerabilities":[{"cve":{"id":"CVE-2025-15488","sourceIdentifier":"contact@wpscan.com","published":"2026-03-26T07:16:19.500","lastModified":"2026-06-17T08:37:52.917","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Responsive Plus  WordPress plugin before 3.4.3 is vulnerable to arbitrary shortcode execution due to the software allowing unauthenticated users to execute the update_responsive_woo_free_shipping_left_shortcode AJAX action that does not properly validate the content_rech_data parameter before processing it as a shortcode."},{"lang":"es","value":"El plugin de WordPress Responsive Plus anterior a la versión 3.4.3 es vulnerable a la ejecución arbitraria de shortcodes debido a que el software permite a usuarios no autenticados ejecutar la acción AJAX update_responsive_woo_free_shipping_left_shortcode que no valida correctamente el parámetro content_rech_data antes de procesarlo como un shortcode."}],"affected":[{"source":"contact@wpscan.com","affectedData":[{"vendor":"Unknown","product":"Responsive Plus","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"3.4.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-26T13:34:31.641435Z","id":"CVE-2025-15488","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"references":[{"url":"https://wpscan.com/vulnerability/80ce0f88-3065-48c4-a491-b70e067ce4d7/","source":"contact@wpscan.com"}]}}]}