$ cve CVE-2025-60188 JSON

CVE-2025-60188 EXPLOIT

7.5

HIGH · CVSS 3.1 · EPSS 3.7% (pctl 90)

Patch early

A public exploit exists.

Description

Insertion of Sensitive Information Into Sent Data vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Retrieve Embedded Sensitive Data.This issue affects Atarim: from n/a through <= 4.2.1.

Scoring

CVSS	7.5 (HIGH, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS	3.73% — more likely to be exploited than 90% of all CVEs
Weakness	CWE-201
On CISA KEV	no
Public exploit	yes
Published	2025-11-06
Last modified	2026-10-07

Public exploits

Source	Title	Date
exploit-db	Atarim WordPress Plugin 4.2.2 - Sensitive Information Exposure	2026-07-08

References

https://patchstack.com/database/Wordpress/Plugin/atarim-visual-collaboration/vulnerability/wordpress-atarim-plugin-4-2-sensitive-data-exposure-vulnerability-2?_s_id=cve

→ the Explorer · watch your stack · NVD