PT-2025-36205 · Rami Yushuvaev · Rami Yushuvaev Site Info

Bao - Bluerock · Publicado 2025-09-05 · Atualizado 2025-09-05 · CVE-2025-58866

Positive Technologies (AI Summary)

CVSS v3.1

2.7

Baixa

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Rami Yushuvaev Site Info versions n/a through 1.1

Description A vulnerability exists in Rami Yushuvaev Site Info that allows the retrieval of embedded sensitive data, potentially exposing sensitive system information to an unauthorized control sphere.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-497

Identificadores relacionados

CVE-2025-58866

Produtos afetados

Rami Yushuvaev Site Info

Referências · 5

• https://patchstack.com/database/wordpress/plugin/site-info-dashboard-widget/vulnerability/wordpress-site-info-plugin-1-1-sensitive-data-exposure-vulnerability?_s_id=cve · Nota
• https://twitter.com/CVEnew/status/1964008872789655754 · Publicação no Twitter
• https://t.me/CVEtracker/31771 · Publicação no Telegram
• https://patchstack.com/database/Wordpress/Plugin/site-info-dashboard-widget/vulnerability/wordpress-site-info-plugin-1-1-sensitive-data-exposure-vulnerability?_s_id=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-58866 · Nota de Segurança