CVE-2025-12074Disclosure

LOWCVSS 5.3 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The Context Blog theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.5 via the 'context_blog_modal_popup' due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from password protected, private, or draft posts that they should not have access to.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-200

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • 3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-02-18: 3Technical Details · 2026-02-18: 202-18
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Full discourse3 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2025-12074 Information Exposure Vulnerability in Context Blog WordPress Theme via Modal Popup https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-12074

    Post summary

    The text reports a CVE with a brief technical description of an information exposure issue in a WordPress theme, but provides no PoC, exploit details, patch, or active exploitation evidence.

    0001025
    4.0K followersView on X
  • CVEarity@CVEarity
    Disclosure

    ⚡ New CVE Alert: CVE-2025-12074 📊 Severity: 5.3 🚨 Risk Level: Medium 🧩 Affects: Wordpress Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-12074 #CVE-2025-12074 #CVE #Medium #Wordpress #CyberSecurity #InfoSec https://t.co/zArqGtgMP7

    Post summary

    The tweet announces CVE-2025-12074 affecting WordPress, noting a severity score of 5.3 (medium risk) and linking to the NVD entry.

    0000051
    56 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2025-12074 The Context Blog theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.5 via the 'context_blog_modal_popup' due to insuf… https://www.cve.org/CVERecord?id=CVE-2025-12074

    Post summary

    The CVE-2025-12074 vulnerability is an Information Exposure flaw in the Context Blog WordPress theme affecting all versions up to 1.2.5. No PoC, exploit, patch, or active exploitation details are provided.

    00000180
    56.4K followersView on X

Explore more