CVE-2025-48355

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ProveSource LTD ProveSource Social Proof provesource allows Retrieve Embedded Sensitive Data.This issue affects ProveSource Social Proof: from n/a through <= 3.1.2.
CVSS

No CVSS.

Configurations

No configuration.

History

01 Apr 2026, 17:24

Type Values Removed Values Added
Summary (en) Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ProveSource LTD ProveSource Social Proof allows Retrieve Embedded Sensitive Data.This issue affects ProveSource Social Proof: from n/a through 3.0.5. (en) Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ProveSource LTD ProveSource Social Proof provesource allows Retrieve Embedded Sensitive Data.This issue affects ProveSource Social Proof: from n/a through <= 3.1.2.
CVSS v2 : unknown
v3 : 5.3
v2 : unknown
v3 : unknown
References
  • {'url': 'https://patchstack.com/database/wordpress/plugin/provesource/vulnerability/wordpress-provesource-social-proof-plugin-3-0-5-sensitive-data-exposure-vulnerability?_s_id=cve', 'source': 'audit@patchstack.com'}
  • () https://patchstack.com/database/Wordpress/Plugin/provesource/vulnerability/wordpress-provesource-social-proof-plugin-3-0-5-sensitive-data-exposure-vulnerability?_s_id=cve -

22 Aug 2025, 18:09

Type Values Removed Values Added
Summary
  • (es) Vulnerabilidad de exposición de información confidencial del sistema a una esfera de control no autorizada en ProveSource LTD ProveSource Social Proof permite recuperar datos confidenciales integrados. Este problema afecta a ProveSource Social Proof: desde n/a hasta 3.0.5.

21 Aug 2025, 04:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-08-21 04:15

Updated : 2026-04-01 17:24


NVD link : CVE-2025-48355

Mitre link : CVE-2025-48355

CVE.ORG link : CVE-2025-48355


JSON object : View

Products Affected

No product.

CWE
CWE-497

Exposure of Sensitive System Information to an Unauthorized Control Sphere