CVE-2025-68516CWE-201

CVE-2025-68516

Medium · published December 24, 2025

CVSS v3.1
5.0
EPSS
0%
Percentile
11.0
In the wild
Unconfirmed
What it is

⚠️ Watch out! Sensitive information could be slipping through the cracks in Essekia Tablesome. As of version 1.1.35.1, this tool is allowing unwanted retrieval of embedded data! Think of it like a restaurant that serves patrons their meal on a plate, but forgot to take away the chef's notes about ingredients and allergies — now anyone can see what’s been baked into their dish! This vulnerability could allow an attacker to retrieve sensitive information embedded in sent data, potentially exposing confidential details. While not catastrophic, this could lead to data leaks or misuse of sensitive information if combined with other vulnerabilities.

Put simply

Think of it like a restaurant that serves patrons their meal on a plate, but forgot to take away the chef's notes about ingredients and allergies — now anyone can see what’s been baked into their dish! The vulnerability in Essekia Tablesome allows for an insertion of sensitive information into sent data, meaning that any sensitive embedded information could be accessed by unauthorized users.

What to do

This vulnerability could allow an attacker to retrieve sensitive information embedded in sent data, potentially exposing confidential details. While not catastrophic, this could lead to data leaks or misuse of sensitive information if combined with other vulnerabilities. To remedy this, update Tablesome to the latest version available and conduct an audit of your data handling practices to ensure sensitive information is not being embedded inappropriately. It's time to seal those data sauces! You've got this! By taking these steps, you can safeguard your data and keep your systems secure. 🛡️

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00212 · 11.0th percentile
Weakness
CWE-201 · Insertion of Sensitive Information Into Sent Data
Published
2025-12-24T18:16Z
References (1)
EPSS history
Timeline
  • 24 DEC 12:31Z
    WordPress Tablesome plugin <= 1.1.35.1 - Sensitive Data Exposure vulnerability
    cvelistv5