/Vulnerability Library

12 Step Meeting List < 3.16.6 - Unauthenticated Sensitive Information Exposure

CVE-2025-24582
Verified

Description

The 12 Step Meeting List plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.16.5.This makes it possible for unauthenticated attackers to extract sensitive user or configuration data via two AJAX endpoints: tsml_info and tsml_geocodes.

Severity

Medium

Affected Product

12-step-meeting-list

Published Date

February 12, 2026

Template Author

pussycat0x

CVE-2025-24582.yaml
5.0Severity

CVSS Metrics

References

https://wpscan.com/vulnerability/e67936e3-a56e-40d4-9647-75c71499ee0a/https://www.wordfence.com/threat-intel/vulnerabilities/id/43f34d3b-ed55-48d1-9074-b33f166e333e

Remediation Steps

Update to the latest version of Code for Recovery 12 Step Meeting List.