CVE-2025-15508Disclosure

LOWCVSS 5.3 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The Magic Import Document Extractor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.4 via the get_frontend_settings() function. This makes it possible for unauthenticated attackers to extract the site's magicimport.ai license key from the page source on any page containing the plugin's shortcode.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-200

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets3 URLs

By indicator

Full discourse2 posts

Vulmon Vulnerability Feed@VulmonFeeds247d
Disclosure
CVE-2025-15508 Unauthenticated Sensitive Information Disclosure in Magic Import ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-15508 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
The tweet announces CVE-2025-15508, describing an unauthenticated sensitive information disclosure in Magic Import, and provides links for more details and alert subscriptions.
0000063
4.0K followersView on X
CVE@CVEnew247d
Disclosure
CVE-2025-15508 The Magic Import Document Extractor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.4 via the get_front… https://www.cve.org/CVERecord?id=CVE-2025-15508
Post summary
The Magic Import Document Extractor plugin for WordPress is affected by a Sensitive Information Exposure vulnerability (CVE-2025-15508) in all versions up to 1.0.4 via the get_front….
00000169
56.5K followersView on X

Explore more

Back to dashboard