Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-67470 EUVD-2025-202134GHSA-mg95-m74x-55j8

WordPress Portfolio and Projects plugin <= 1.5.5 - Sensitive Data Exposure vulnerability

Published Dec 9, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Essential Plugin Portfolio and Projects portfolio-and-projects allows Retrieve Embedded Sensitive Data.This issue affects Portfolio and Projects: from n/a through <= 1.5.5.

Affected products

VendorProductAffectedFixed
Essential Plugin Portfolio and Projects ≤ 1.5.5 —

References