Sensitive Data Exposure Vulnerability in Follow My Blog Post by WordPress
CVE-2025-64258

Currently unrated

Key Information:

Vendor

WordPress

Vendor
CVE Published:
18 December 2025

What is CVE-2025-64258?

The Follow My Blog Post plugin for WordPress contains a vulnerability that allows unauthorized users to retrieve embedded sensitive data. This flaw can lead to exposure of sensitive system information, potentially allowing attackers to access confidential details stored within the plugin. The issue is present in versions from n/a up to and including 2.3.9, making it crucial for users to update to a secure version to mitigate the risk of data breaches.

Affected Version(s)

Follow My Blog Post <= n/a

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Denver Jackson | Patchstack Bug Bounty Program
.
CVE-2025-64258 : Sensitive Data Exposure Vulnerability in Follow My Blog Post by WordPress