CVE-2025-9987 broadstreetads CVE debrief

Who should care

Defenders responsible for WordPress installations with the Broadstreet plugin should assess exposure and prioritize verification of plugin versions up to 1.53.1. They should also restrict access to the get_sponsored_meta() AJAX action and monitor for potential exploitation attempts. Additionally, defenders should review compensating controls for exposed systems while remediation is scheduled and verified, and track exceptions, retest remediated assets, and

Why it matters

The Broadstreet plugin for WordPress is vulnerable to Sensitive Information Exposure, allowing authenticated attackers to extract sensitive data. Defenders should prioritize verifying exposure and restricting access to the affected AJAX action.

• Potential extraction of sensitive data from password protected and private business details
• Possible exploitation by authenticated attackers with subscriber-level access and above

Technical summary

The Broadstreet plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.53.1 via the get_sponsored_meta() AJAX action. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract data from password protected and private business details. The vulnerability is caused by insufficient access controls on the get_sponsored_meta() AJAX action, allowing unauthorized access to sensitive data. Defenders should prioritize verifying exposure of the Broadstreet plugin versions up to 1.53.1 in their WordPress installations and restrict access to the get_sponsored_meta() AJAX action.

Defensive priority

Defenders should prioritize verifying exposure of the Broadstreet plugin versions up to 1.53.1 in their WordPress installations and restrict access to the get_sponsored_meta() AJAX action.

Recommended defensive actions

• Verify exposure of Broadstreet plugin versions up to 1.53.1 in WordPress installations
• Restrict access to the get_sponsored_meta() AJAX action
• Monitor for potential exploitation attempts
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and NVD entry provide details on the vulnerability in the Broadstreet plugin for WordPress, including the affected versions and the potential impact of Sensitive Information Exposure. The vulnerability allows authenticated attackers with subscriber-level access and above to extract data from password protected and private business details. Defenders should verify exposure and restrict access to the get_sponsored_meta() AJAX action. The source details are limited, so defenders should exercise caution and verify the facts

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.