PT-2025-43346 · Unknown · Blockspare

Abu Hurayra · Published 2025-10-22 · Updated 2025-10-22 · CVE-2025-62026

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Blockspare versions n/a through 3.2.13.2

Description A flaw exists in Blockspare that allows retrieval of embedded sensitive data due to insertion of sensitive information into sent data. The number of potentially affected devices worldwide is not specified. There are no reports of real-world incidents where this issue was exploited. No specific API endpoints, vulnerable parameters, or function names are mentioned in the provided information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-201

Related Identifiers

CVE-2025-62026

Affected Products

Blockspare

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-62026 · Security Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/blockspare/vulnerability/wordpress-blockspare-plugin-3-2-13-2-sensitive-data-exposure-vulnerability · Note
• https://twitter.com/CVEnew/status/1981046834408935508 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/blockspare/vulnerability/wordpress-blockspare-plugin-3-2-13-2-sensitive-data-exposure-vulnerability?_s_id=cve · Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/blockspare/vulnerability/wordpress-blockspare-plugin-3-2-13-2-sensitive-data-exposure-vulnerability?_s_id=cve · Note