CVE-2025-58246
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
WordPress <= 6.8.2 - (Contributor+) Sensitive Data Exposure Vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in WordPress allows Retrieve Embedded Sensitive Data. The WordPress Core security team is aware of the issue and is already working on a fix. This is a low-severity vulnerability. Contributor-level privileges required in order to exploit it. This issue affects WordPress: from 6.8 through 6.8.2, from 6.7 through 6.7.3, from 6.6 through 6.6.3, from 6.5 through 6.5.6, from 6.4 through 6.4.6, from 6.3 through 6.3.6, from 6.2 through 6.2.7, from 6.1 through 6.1.8, from 6.0 through 6.0.10, from 5.9 through 5.9.11, from 5.8 through 5.8.11, from 5.7 through 5.7.13, from 5.6 through 5.6.15, from 5.5 through 5.5.16, from 5.4 through 5.4.17, from 5.3 through 5.3.19, from 5.2 through 5.2.22, from 5.1 through 5.1.20, from 5.0 through 5.0.23, from 4.9 through 4.9.27, from 4.8 through 4.8.26, from 4.7 through 4.7.30.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
WordPress
- Vendor
- WordPress
- Product
- WordPress
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.8 | affected | custom | Unavailable | 6.8.2 |
|
| 6.7 | affected | custom | Unavailable | 6.7.3 |
|
| 6.6 | affected | custom | Unavailable | 6.6.3 |
|
| 6.5 | affected | custom | Unavailable | 6.5.6 |
|
| 6.4 | affected | custom | Unavailable | 6.4.6 |
|
| 6.3 | affected | custom | Unavailable | 6.3.6 |
|
| 6.2 | affected | custom | Unavailable | 6.2.7 |
|
| 6.1 | affected | custom | Unavailable | 6.1.8 |
|
| 6.0 | affected | custom | Unavailable | 6.0.10 |
|
| 5.9 | affected | custom | Unavailable | 5.9.11 |
|
| 5.8 | affected | custom | Unavailable | 5.8.11 |
|
| 5.7 | affected | custom | Unavailable | 5.7.13 |
|
| 5.6 | affected | custom | Unavailable | 5.6.15 |
|
| 5.5 | affected | custom | Unavailable | 5.5.16 |
|
| 5.4 | affected | custom | Unavailable | 5.4.17 |
|
| 5.3 | affected | custom | Unavailable | 5.3.19 |
|
| 5.2 | affected | custom | Unavailable | 5.2.22 |
|
| 5.1 | affected | custom | Unavailable | 5.1.20 |
|
| 5.0 | affected | custom | Unavailable | 5.0.23 |
|
| 4.9 | affected | custom | Unavailable | 4.9.27 |
|
| 4.8 | affected | custom | Unavailable | 4.8.26 |
|
| 4.7 | affected | custom | Unavailable | 4.7.30 |
|