Portfolio and Projects, CVE-2025-67470

CVE, Research URL: CVE-2025-67470
Home page URL: Security reports for Portfolio and Projects
Application: Portfolio and Projects
Published on: Dec 09, 2025
Research Description: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Essential Plugin Portfolio and Projects portfolio-and-projects allows Retrieve Embedded Sensitive Data.This issue affects Portfolio and Projects: from n/a through <= 1.5.5.
Affected versions: max 1.5.5.
Status: vulnerable