Sensitive Information Exposure Vulnerability in Brizy Page Builder for WordPress

CVE-2025-0969

What is CVE-2025-0969?

The Brizy Page Builder plugin for WordPress is susceptible to a sensitive information exposure vulnerability, present in all versions up to and including 2.7.16. This flaw allows authenticated attackers with Contributor-level access or higher to exploit the get_users() function, potentially exposing sensitive data such as administrator email addresses and hashed passwords. This poses a significant risk to user data security and can lead to further exploitation if not addressed.

References