Medium · 5.3 CVE-2025-54736 EUVD-2025-24915GHSA-h4hj-73f4-pxmr

WordPress Savoy Theme <= 3.0.8 - Sensitive Data Exposure Vulnerability

Published Aug 14, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NordicMade Savoy savoy allows Retrieve Embedded Sensitive Data.This issue affects Savoy: from n/a through <= 3.0.8.

Affected products

Vendor	Product	Affected	Fixed
NordicMade	Savoy	≤ 3.0.8	—

References

https://patchstack.com/database/Wordpress/Theme/savoy/vulnerability/wordpress-savoy-theme-plugin-3-0-8-sensitive-data-exposure-vulnerability?_s_id=cve vdb-entry