Skip to content
OpenAdvisories
Low · 2.7 CVE-2025-58866 EUVD-2025-26911GHSA-pq28-gv4f-6r2q

WordPress Site Info Plugin <= 1.1 - Sensitive Data Exposure Vulnerability

Published Sep 5, 2025 · Updated May 12, 2026 · Assigned by Patchstack

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Rami Yushuvaev Site Info site-info-dashboard-widget allows Retrieve Embedded Sensitive Data.This issue affects Site Info: from n/a through <= 1.1.

Affected products

VendorProductAffectedFixed
Rami Yushuvaev Site Info ≤ 1.1 —

References