What is CVE-2025-2882?

CVE-2025-2882 is a medium-severity vulnerability in Greenmoney Greenpay(tm) By Green.money, classified under Information Disclosure. CVSS score: 5.3/10. Published 2025-04-08.

How severe is CVE-2025-2882?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Information disclosure in Greenmoney Greenpay(tm) By Green.money

CVE-2025-2882

The GreenPay(tm) by Green.Money plugin for WordPress is vulnerable to Sensitive Information Exposure in versions between 3.0.0 and 3.0.9 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attacke…

Vulnerability class: Information Disclosure

EPSS: 0.004 (27.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Greenmoney Greenpay(tm) By Green.money — versions 3.0.0

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

Frequently asked questions

What is CVE-2025-2882?: CVE-2025-2882 is a medium-severity vulnerability in Greenmoney Greenpay(tm) By Green.money, classified under Information Disclosure. CVSS score: 5.3/10. Published 2025-04-08.
How severe is CVE-2025-2882?: Medium severity. CVSS v3 base score is 5.3 out of 10.