PT-2025-52176 · WordPress · Wpweb Follow My Blog Post

Denver Jackson · Published 2025-12-18 · Updated 2025-12-18 · CVE-2025-64258

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions wpweb Follow My Blog Post versions through 2.3.9

Description A flaw exists in wpweb Follow My Blog Post that allows the retrieval of embedded sensitive data, potentially exposing system information to unauthorized access.

Recommendations Update wpweb Follow My Blog Post to a version later than 2.3.9.

Fix

Weakness Enumeration

CWE-497

Related Identifiers

CVE-2025-64258

Affected Products

Wpweb Follow My Blog Post

References · 5

• https://osv.dev/vulnerability/CVE-2025-64258 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-64258 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/follow-my-blog-post/vulnerability/wordpress-follow-my-blog-post-plugin-2-3-9-sensitive-data-exposure-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2001728133343690972 · Twitter Post
• https://vdp.patchstack.com/database/Wordpress/Plugin/follow-my-blog-post/vulnerability/wordpress-follow-my-blog-post-plugin-2-3-9-sensitive-data-exposure-vulnerability?_s_id=cve · Note