Description
Insertion of Sensitive Information Into Sent Data vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Retrieve Embedded Sensitive Data.This issue affects Atarim: from n/a through <= 4.2.1.
Published: 2025-11-06
Score: 7.5 High
EPSS: 2.9% Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is an insertion of sensitive information into data sent out of the system. Labeled as CWE‑201, this embedded sensitive data that may include personal or credential information, thereby compromising confidentiality.

Affected Systems

The issue affects Vito Peleg’s Atarim visual collaboration plugin for WordPress for all releases up to and including 4.2.1. that has any of these affected plugin versions is at risk.

Risk and Exploitability

The CVSS score of 7.5 signals high severity, while the EPSS score of 3% indicates a low but non‑zero likelihood of exploitation in the wild. Based on the description, the likely attack vector is remote via HTTP requests to the site, as the vulnerability involves data sent out of the system. The vulnerability is not listed in the CISA KEV catalog, but the potential for sensitive data exposure warrants prompt remediation.

Generated by OpenCVE AI on July 23, 2026 at 18:03 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the Atarim plugin to version 4.2.2 or higher to eliminate the data exposure flaw.
  • If an update is not available, disable or uninstall the Atarim plugin to stop the transmission of sensitive data.
  • Deploy network monitoring or filtering rules that detect and block data payloads containing sensitive information generated by the plugin.

Generated by OpenCVE AI on July 23, 2026 at 18:03 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 27 Apr 2026 18:30:00 +0000

Type Values Removed Values Added
References

Mon, 27 Apr 2026 18:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

 ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 23 Apr 2026 15:00:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H'}

 cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

Wed, 01 Apr 2026 23:45:00 +0000

Type Values Removed Values Added
Description Insertion of Sensitive Information Into Sent Data vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Retrieve Embedded Sensitive Data.This issue affects Atarim: from n/a through <= 4.2. Insertion of Sensitive Information Into Sent Data vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Retrieve Embedded Sensitive Data.This issue affects Atarim: from n/a through <= 4.2.1.
Title WordPress Atarim plugin <= 4.2 - Sensitive Data Exposure vulnerability WordPress Atarim plugin <= 4.2.1 - Sensitive Data Exposure vulnerability

Tue, 20 Jan 2026 15:30:00 +0000

Type Values Removed Values Added
References

Tue, 20 Jan 2026 14:45:00 +0000

Type Values Removed Values Added
References

Tue, 13 Jan 2026 22:15:00 +0000

Type Values Removed Values Added
References
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

 ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Mon, 17 Nov 2025 16:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 13 Nov 2025 11:30:00 +0000

Type Values Removed Values Added
References

Thu, 13 Nov 2025 10:45:00 +0000

Type Values Removed Values Added
References

Thu, 06 Nov 2025 20:45:00 +0000

Type Values Removed Values Added
First Time appeared Atarim
Atarim atarim
Wordpress
Wordpress wordpress
Vendors & Products Atarim
Atarim atarim
Wordpress
Wordpress wordpress

Thu, 06 Nov 2025 16:00:00 +0000

Type Values Removed Values Added
Description Insertion of Sensitive Information Into Sent Data vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Retrieve Embedded Sensitive Data.This issue affects Atarim: from n/a through <= 4.2.
Title WordPress Atarim plugin <= 4.2 - Sensitive Data Exposure vulnerability
Weaknesses CWE-201
References

Subscriptions

Atarim Atarim
Wordpress Wordpress
cve-icon MITRE

Status: PUBLISHED

Assigner: Patchstack

Published:

Updated: 2026-04-28T16:13:57.069Z

Reserved: 2025-09-25T15:28:27.831Z

Link: CVE-2025-60188

cve-icon Vulnrichment

Updated: 2025-11-17T14:55:39.428Z

cve-icon NVD

Status : Deferred

Published: 2025-11-06T16:16:03.560

Modified: 2026-06-17T09:49:30.957

Link: CVE-2025-60188

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-23T18:15:12Z

Weaknesses
  • CWE-201

    Insertion of Sensitive Information Into Sent Data