Sensitive Data Exposure in Atarim Visual Collaboration by Vito Peleg
CVE-2025-60188

7.5HIGH

Key Information:

Vendor

WordPress
Status
Atarim
Vendor
CVE Published:
6 November 2025

What is CVE-2025-60188?

A vulnerability in the Atarim Visual Collaboration plugin developed by Vito Peleg enables the unintended retrieval of sensitive embedded information. This flaw allows attackers to access sensitive data that should remain confidential, posing a risk to users' privacy and security. Affected versions include those up until 4.2, meaning users of the plugin should ensure they are using a patch or updated version to safeguard their data against potential exploitation.

Affected Version(s)

Atarim <= n/a

References

https://vdp.patchstack.com/database/Wordpress/Plugin/atar...
vdb-entry

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Denver Jackson | Patchstack Bug Bounty Program
JSON
.
CVE-2025-60188 : Sensitive Data Exposure in Atarim Visual Collaboration by Vito Peleg