PT-2025-38774 · Ideal Postcodes · Uk Address Postcode Validation

Christopher Blanchard + 1 · Published 2025-09-22 · Updated 2025-10-24 · CVE-2025-57923

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Ideal Postcodes UK Address Postcode Validation versions through 3.9.2

Description A flaw exists in the UK Address Postcode Validation software that allows for the retrieval of embedded sensitive data through the insertion of sensitive information into sent data. The issue impacts the software’s ability to handle data securely during postcode validation processes.

Recommendations Update to a version later than 3.9.2.

Fix

Weakness Enumeration

CWE-201

Related Identifiers

CVE-2025-57923

Affected Products

Uk Address Postcode Validation

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-57923 · Security Note
• https://t.me/cveNotify/140221 · Telegram Post
• https://patchstack.com/database/wordpress/plugin/uk-address-postcode-validation/vulnerability/wordpress-uk-address-postcode-validation-plugin-3-9-2-sensitive-data-exposure-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/uk-address-postcode-validation/vulnerability/wordpress-uk-address-postcode-validation-plugin-3-9-2-sensitive-data-exposure-vulnerability?_s_id=cve · Note
• https://t.me/cveNotify/140125 · Telegram Post
• https://web.archive.org/web/20250807222539/https://docs.ideal-postcodes.co.uk/docs/guides/api-key-secure · Note
• https://twitter.com/CVEnew/status/1970208018320228470 · Twitter Post