CVE-2025-62737

MediumCVSS 5.3

Published: 09/12/2025(UTC)Updated: 07/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

19th percentile - higher than 19% of all known CVEs

Summary

A vulnerability in the Image Cleanup plugin (opicron) allows exposure of sensitive system information to unauthorized parties. The issue affects versions up to and including 1.9.2.

Risk Assessment

An attacker could gain access to sensitive system data, potentially leading to confidentiality breach and aiding further attacks.

Recommendation

Update the Image Cleanup plugin to the latest available version that includes a security fix.

Other vulnerabilities in Image Cleanup

CVE-2025-62736Medium
The Image Cleanup plugin up to version 1.9.2 has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.

Original NVD description (English source)

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in opicron Image Cleanup image-cleanup allows Retrieve Embedded Sensitive Data.This issue affects Image Cleanup: from n/a through <= 1.9.2.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS