CVE-2025-9987

Name of the Vulnerable Software and Affected Versions Broadstreet versions prior to 1.53.2

Description The Broadstreet plugin for WordPress contains a sensitive information exposure flaw. Authenticated attackers with subscriber-level access or higher can extract data from private and password-protected business details through the 'get sponsored meta()' AJAX action.

Recommendations Update the plugin to a version later than 1.53.1. As a temporary workaround, restrict access to the get sponsored meta() AJAX action to minimize the risk of exploitation.