CVE-2025-15488 | Responsive Plus Plugin up to 3.4.2 on WordPress Shortcode content_rech_data authorization

A vulnerability was found in Responsive Plus Plugin up to 3.4.2 on WordPress. It has been classified as critical. Affected is the function update_responsive_woo_free_shipping_left_shortcode of the component Shortcode Handler. The manipulation of the argument content_rech_data leads to incorrect authorization.

This vulnerability is documented as CVE-2025-15488. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.