CVE-2025-62947

MediumCVSS 5.0

Published: 27/10/2025(UTC)Updated: 19/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

17th percentile - higher than 17% of all known CVEs

Summary

The Publitio plugin in versions up to 2.2.5 contains an Insertion of Sensitive Information Into Sent Data vulnerability. This may allow retrieval of embedded sensitive data.

Risk Assessment

Disclosure of sensitive information can lead to privacy or data security breaches. It may be exploited by an attacker to gain access to sensitive resources.

Recommendation

Update the Publitio plugin to a version newer than 2.2.5 that contains the fix. If updating is not possible, consider disabling the plugin.

Other vulnerabilities in Publitio

CVE-2025-58962Medium
The Publitio plugin (versions up to 2.2.1) is vulnerable to Server-Side Request Forgery (SSRF). This allows an attacker to force server-side requests to arbitrary resources.

Original NVD description (English source)

Insertion of Sensitive Information Into Sent Data vulnerability in publitio Publitio publitio allows Retrieve Embedded Sensitive Data.This issue affects Publitio: from n/a through <= 2.2.5.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS