4.3

CVE-2025-62026

WordPress Blockspare plugin <= 3.2.13.2 - Sensitive Data Exposure vulnerability

Blockspare <= 3.2.13.2 - Authenticated (Contributor+) Sensitive Information Exposure

Insertion of Sensitive Information Into Sent Data vulnerability in Blockspare Blockspare blockspare allows Retrieve Embedded Sensitive Data.This issue affects Blockspare: from n/a through <= 3.2.13.2.
Mögliche Gegenmaßnahme
BlockSpare – Effortless site creation powered by AI block generation, visual Theme Builder, expert templates, and refined Gutenberg blocks for blog, news, magazine, and agency websites. Generate AI content, build custom layouts, and publish with ease!: Update to version 3.2.14, or a newer patched version
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerBlockspare
≫
Produkt Blockspare
Default Statusunaffected
Version <= 3.2.13.2
Version 0
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt BlockSpare – Effortless site creation powered by AI block generation, visual Theme Builder, expert templates, and refined Gutenberg blocks for blog, news, magazine, and agency websites. Generate AI content, build custom layouts, and publish with ease!
Version *-3.2.13.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.26% 0.173
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
CISA-ADP 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CWE-201 Insertion of Sensitive Information Into Sent Data

The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

https://patchstack.com/database/Wordpress/Plugin/blockspare/vulnerability/wordpress-blockspare-plugin-3-2-13-2-sensitive-data-exposure-vulnerability?_s_id=cve
https://www.wordfence.com/threat-intel/vulnerabilities/id/196d472b-b268-48f1-8dda-ee6d9e659483
Third Party Advisory