Broadstreet, CVE-2025-9987

CVE, Research URL: CVE-2025-9987
Home page URL: Security reports for Broadstreet
Application: Broadstreet
Published on: May 13, 2026
Research Description: The Broadstreet plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.53.1 via the get_sponsored_meta() AJAX action. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract data from password protected and private business details.
Affected versions: max 1.53.2.
Status: vulnerable