What is GHSA-386v-44mw-jh76?

GHSA-386v-44mw-jh76 is a security advisory published by GitHub Security Advisories with Medium severity. The Broadstreet plugin for WordPress is vulnerable to Sensitive Information Exposure in all...

Which CVE IDs does GHSA-386v-44mw-jh76 cover?

GHSA-386v-44mw-jh76 covers the following CVE IDs: CVE-2025-9987. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-386v-44mw-jh76?

GHSA-386v-44mw-jh76 has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-386v-44mw-jh76MediumCVSS 5.3

The Broadstreet plugin for WordPress is vulnerable to Sensitive Information Exposure in all...

Vendor

GitHub Security Advisories

Published

October 1, 2026

Last Modified

October 1, 2026

🔗 CVE IDs covered (1)

CVE-2025-9987 →

📋 Description

The Broadstreet plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.53.1 via the get_sponsored_meta() AJAX action. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract data from password protected and private business details.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-9987
https://plugins.trac.wordpress.org/changeset/3524817
https://www.wordfence.com/threat-intel/vulnerabilities/id/b3cc3835-25f5-43b3-82be-397b8b3bd369?source=cve
https://github.com/advisories/GHSA-386v-44mw-jh76