CVE-2025-68040 is a sensitive data exposure vulnerability (CWE-201) affecting weDevs WP Project Manager versions up to and including 3.0.1, allowing for the retrieval of sensitive information inadvertently inserted into sent data. Rated with a CVSS v3.1 score of 6.5 (Medium), exploitation requires low privileges and low attack complexity over the network, resulting in a high impact on confidentiality without user interaction. There is currently no evidence of active exploitation, public exploit code availability, or significant community discussion, with its EPSS score indicating a very low likelihood of exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 0, <= 3.0.1CPE match | cpe:2.3:a:wedevs:wp_project_manager:*:*:*:*:*:wordpress:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.