PT-2025-50006 · Opicron+1 · Image Cleanup
CVE-2025-62737
·
Published
2025-12-04
·
Updated
2025-12-09
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Image Cleanup versions prior to 1.9.3
Description
The Image Cleanup plugin for WordPress allows the retrieval of embedded sensitive data. This issue enables unauthenticated attackers to extract sensitive user or configuration data, leading to the exposure of sensitive system information to an unauthorized control sphere.
Recommendations
Update the plugin to a version newer than 1.9.2.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Image Cleanup