CVE-2025-62955

MediumCVSS 4.3

Published: 21/12/2025(UTC)Updated: 19/10/2026(UTC)Translated: 20/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile - higher than 11% of all known CVEs

Summary

The HappyDevs TempTool [Show Current Template Info] plugin in versions up to and including 1.3.1 exposes sensitive system information to an unauthorized control sphere, allowing retrieval of embedded sensitive data.

Risk Assessment

An unauthorized user may gain access to sensitive system data, which could facilitate further attacks or reveal environment information.

Recommendation

Update the TempTool plugin to a version later than 1.3.1 or disable it if no update is available.

Other vulnerabilities in TempTool [Show Current Template Info]

CVE-2025-62926Medium
The WordPress plugin TempTool [Show Current Template Info] is vulnerable to stored XSS due to improper neutralization of input during web page generation. The vulnerability affects versions from n/a through <= 1.3.1.

Original NVD description (English source)

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HappyDevs TempTool [Show Current Template Info] current-template-name allows Retrieve Embedded Sensitive Data.This issue affects TempTool [Show Current Template Info]: from n/a through <= 1.3.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS