Information disclosure in Kiwicommerce Pdf Resume Parser
CVE-2025-14464
The PDF Resume Parser plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0. This is due to the plugin registering an AJAX action handler that is accessible to unauthenticated users…
Vulnerability class: Information Disclosure
EPSS: 0.003 (24.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Kiwicommerce Pdf Resume Parser — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-14464?
- CVE-2025-14464 is a medium-severity vulnerability in Kiwicommerce Pdf Resume Parser, classified under Information Disclosure. CVSS score: 5.3/10. Published 2026-01-14.
- How severe is CVE-2025-14464?
- Medium severity. CVSS v3 base score is 5.3 out of 10.