Vulnerability in Responsive Plus
CVE-2025-15488
The Responsive Plus WordPress plugin before 3.4.3 is vulnerable to arbitrary shortcode execution due to the software allowing unauthenticated users to execute the update_responsive_woo_free_shipping_left_shortcode AJAX action that does no…
EPSS: 0.001 (16.3th percentile) — read the EPSS interpretation.
Affected products
- Unknown Responsive Plus — versions 0
References
- wpscan.com/vulnerability/80ce0f88-3065-48c4-a491-b70e067ce4d7/ (exploit, vdb-entry, technical-description)