PT-2025-46524 · WordPress · Format Plugins

Published 2025-09-04 · Updated 2025-11-13 · CVE-2025-61842

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Format Plugins versions 1.1.1 and earlier

Description A Use After Free issue exists in Format Plugins versions 1.1.1 and earlier, potentially leading to memory exposure. An attacker could exploit this to disclose sensitive information. Successful exploitation requires user interaction, specifically a victim opening a malicious file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-14207

CVE-2025-61842

ZDI-25-997

Affected Products

Format Plugins

References · 8

• https://bdu.fstec.ru/vul/2025-14207 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-25-997 · Security Note
• https://helpx.adobe.com/security/products/formatplugins/apsb25-114.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61842 · Security Note
• https://t.me/CVEtracker/37072 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1988337067772748134 · Twitter Post
• https://t.me/cveNotify/142475 · Telegram Post
• https://twitter.com/CVEnew/status/1988348982242734389 · Twitter Post