Comment Edit Core - WordPress Plugin Sensitive Information Exposure Vulnerability

Vulnerability

A vulnerability allowing unauthenticated sensitive information exposure has been identified in the Comment Edit Core - Simple Comment Editing plugin for WordPress, affecting all versions through 3.1.0. The issue arises in the 'ajax_get_comment' function, where it is possible for attackers to extract sensitive data such as user IDs, IP addresses, and email addresses.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive user information, including IDs, IP addresses, and email addresses.

Remediation

Users are advised to update the Comment Edit Core - Simple Comment Editing plugin to version 3.2.0 or later.

Added: Nov 13, 2025, 8:18 AM
Updated: Nov 13, 2025, 8:18 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.5
exploitability
8.1
remediation
7.7
relevance
1.0
threat
3.2
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.