Ultimate Auction CVE-2025-66125
MEDIUMSeverity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Network-accessible endpoint, no authentication needed, only low-impact confidential data exposed.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
1DescriptionCVE.org
Insertion of Sensitive Information Into Sent Data vulnerability in Nitesh Ultimate Auction ultimate-auction allows Retrieve Embedded Sensitive Data.This issue affects Ultimate Auction : from n/a through <= 4.3.3.
AnalysisAI
Sensitive information disclosure in WordPress Ultimate Auction plugin up to version 4.3.3 allows unauthenticated remote attackers to retrieve embedded sensitive data from the application's responses. No authentication is required, making exploitation simple with only network access needed. Current threat intelligence indicates a very low risk of exploitation, with no active attacks observed.
Technical ContextAI
The vulnerability is classified as CWE-201: Insertion of Sensitive Information Into Sent Data. This means the affected plugin inadvertently includes sensitive information-such as internal configuration details, API keys, or other hidden data-within responses sent to the client. The issue resides in a WordPress plugin (CPE: cpe:2.3:a:nitesh:ultimate_auction:*:*:*:*:*:wordpress:*:*) and impacts all versions through 4.3.3. The underlying cause is a lack of proper output sanitization or filtering of server-side information before transmission over the network.
Affected ProductsAI
WordPress plugin Ultimate Auction from all versions through 4.3.3. The vendor advisory is available at https://patchstack.com/database/Wordpress/Plugin/ultimate-auction/vulnerability/wordpress-ultimate-auction-plugin-4-3-2-sensitive-data-exposure-vulnerability?_s_id=cve.
RemediationAI
Upgrade the Ultimate Auction plugin to a version higher than 4.3.3 as per the vendor advisory linked in the references. If immediate update is not possible, consider temporarily disabling the plugin to prevent exposure of sensitive data; this will remove all auction functionality until patched. No other workarounds are known.
More in Wordpress Plugin
View allThe Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1
The Hash Form - Drag & Drop Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing fil
Authentication bypass in the LiteSpeed Cache WordPress plugin (versions prior to 6.5.0.1) allows unauthenticated remote
The Simple File List plugin for WordPress through version 4.2.2 contains an unauthenticated remote code execution vulner
The SureTriggers WordPress plugin through version 1.0.82 contains a privilege escalation vulnerability that allows unaut
The Ninja Forms plugin before 2.9.42.1 for WordPress allows remote attackers to conduct PHP object injection attacks via
The Business Directory Plugin - Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based
SQL injection in the NotificationX WordPress plugin (versions up to and including 2.8.2) allows unauthenticated remote a
The POST SMTP Mailer - Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress i
The MasterStudy LMS WordPress Plugin - for Online Courses and Education plugin for WordPress is vulnerable to union base
The Email Subscribers by Icegram Express plugin for WordPress is vulnerable to SQL Injection via the ‘hash’ parameter in
Remote code execution in the WP Query Console WordPress plugin (versions up to and including 1.0) by Ajit Bohra allows u
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today