Sensitive Data Exposure in TaxoPress by Burge Technologies
CVE-2025-55710

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
Taxopress
Vendor
CVE Published:
14 August 2025

What is CVE-2025-55710?

A vulnerability in the TaxoPress plugin allows unauthorized retrieval of sensitive information. This issue enables attackers to access embedded sensitive data transmitted within the plugin, posing a significant risk to user privacy and data integrity. Users of TaxoPress versions up to 3.37.2 should take immediate action to secure their installations and prevent potential data exposure.

Affected Version(s)

TaxoPress <= 3.37.2

References

https://patchstack.com/database/wordpress/plugin/simple-t...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Que Thanh Tuan - Blue Rock (Patchstack Alliance)
.
CVE-2025-55710 : Sensitive Data Exposure in TaxoPress by Burge Technologies