CVE-2025-62947CWE-201

CVE-2025-62947

Medium · published October 27, 2025

CVSS v3.1
5.0
EPSS
0%
Percentile
17.5
In the wild
Unconfirmed
What it is

⚠️ Sensitive data could slip through the cracks! An insertion vulnerability in Publitio could let attackers retrieve embedded sensitive information. 🕵️‍♂️ Think of it like a restaurant that lets customers peek at the chef's notes — if they can see the recipes, they might discover secret ingredients and special techniques. In the same way, this vulnerability could expose sensitive data that should remain private. An attacker could access sensitive information that's not meant for public eyes, leading to potential data leaks and privacy concerns. While not a catastrophe, this could certainly cause a headache for affected users and organizations, making it essential to address promptly.

Put simply

Think of it like a restaurant that lets customers peek at the chef's notes — if they can see the recipes, they might discover secret ingredients and special techniques. In the same way, this vulnerability could expose sensitive data that should remain private. This vulnerability allows sensitive information to be inadvertently included in data sent from the Publitio service, potentially exposing it to unauthorized parties. Versions from 'n/a' through 2.2.5 are at risk.

What to do

An attacker could access sensitive information that's not meant for public eyes, leading to potential data leaks and privacy concerns. While not a catastrophe, this could certainly cause a headache for affected users and organizations, making it essential to address promptly. To protect your data, update Publitio to the latest version immediately. Additionally, review your data handling practices to ensure sensitive information isn't being improperly embedded in sent data. You’ve got this! 🦸 Just follow these steps, and you’ll fortify your defenses in no time. 🛡️

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00265 · 17.5th percentile
Weakness
CWE-201 · Insertion of Sensitive Information Into Sent Data
Published
2025-10-27T06:15Z
References (1)
EPSS history
Timeline
  • 27 OCT 01:34Z
    WordPress Publitio plugin <= 2.2.5 - Sensitive Data Exposure vulnerability
    cvelistv5