CVE-2025-14075 is a sensitive information exposure vulnerability in the WP Hotel Booking WordPress plugin (up to version 2.2.7). The issue arises because the AJAX action 'hotel_booking_fetch_customer_info' is accessible to unauthenticated users without proper capability checks, relying only on a nonce for security. This allows attackers to retrieve sensitive customer data such as full names, addresses, phone numbers, and email addresses by providing a valid email address and the nonce. The vulnerability has a CVSS 3.1 base score of 5.3 (medium severity), with an attack vector of network, low attack complexity, no privileges required, no user interaction, and impacts confidentiality only.

An unauthenticated attacker can access sensitive customer information including full names, addresses, phone numbers, and email addresses. This exposure compromises customer privacy but does not affect data integrity or availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the AJAX action by implementing additional capability checks or disabling the vulnerable AJAX endpoint if possible. Monitor vendor channels for updates and apply patches promptly once released.