PT-2025-43356 · WordPress · Easy Post Submission

Nabil Irawan · Published 2025-10-22 · Updated 2025-10-22 · CVE-2025-62062

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions ThemeRuby Easy Post Submission versions through 1.7.0

Description An issue exists in ThemeRuby Easy Post Submission that allows retrieval of embedded sensitive data due to insertion of sensitive information into sent data.

Recommendations Update ThemeRuby Easy Post Submission to a version later than 1.7.0.

Fix

Weakness Enumeration

CWE-201

Related Identifiers

CVE-2025-62062

Affected Products

Easy Post Submission

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-62062 · Security Note
• https://twitter.com/CVEnew/status/1981046823793152310 · Twitter Post
• https://vdp.patchstack.com/database/Wordpress/Plugin/easy-post-submission/vulnerability/wordpress-easy-post-submission-plugin-1-7-0-sensitive-data-exposure-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/easy-post-submission/vulnerability/wordpress-easy-post-submission-plugin-1-7-0-sensitive-data-exposure-vulnerability?_s_id=cve · Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/easy-post-submission/vulnerability/wordpress-easy-post-submission-plugin-1-7-0-sensitive-data-exposure-vulnerability · Note