CVE-2025-2202: Innovación Y Cualificación Ajax.php Plugin

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Broken access control vulnerability in the Innovación y Cualificación local administration plugin ajax.php. This vulnerability allows an attacker to obtain sensitive information about other users such as id, name, login and email.

Affected products

• Innovación Y Cualificación Ajax.php Plugin: any version

Published 2025-03-17. Last modified 2026-06-17.