CVE: Locker Content <= 1.0.0 - Unauthenticated Information Exposure CVSS: 5.3 (Medium) Publicly Published: November 24, 2025 Last Updated: November 25, 2025 Researcher: Athiwat Tiprasaharn (Jitlada) Description: The Locker Content plugin for WordPress is vulnerable to Sensitive Information Exposure in version 1.0.0 via the 'lockerco_submit_post' AJAX endpoint. This makes it possible for unauthenticated users to access sensitive information. Software Type: Plugin Software Slug: locker-content (view on wordpress.org) Patched?: No Remediation: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement. Affected Version: <= 1.0.0