Medium · 5.3 CVE-2025-62139 EUVD-2025-206039GHSA-r94r-p2mj-94hp

WordPress Terms descriptions plugin <= 3.4.10 - Sensitive Data Exposure vulnerability

Published Dec 31, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Vladimir Statsenko Product: Terms descriptions

Description

Insertion of Sensitive Information Into Sent Data vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows Retrieve Embedded Sensitive Data.This issue affects Terms descriptions: from n/a through <= 3.4.10.

Affected products

Vendor	Product	Affected	Fixed
Vladimir Statsenko	Terms descriptions	≤ 3.4.10	—

References

https://patchstack.com/database/Wordpress/Plugin/terms-descriptions/vulnerability/wordpress-terms-descriptions-plugin-3-4-9-sensitive-data-exposure-vulnerability?_s_id=cve vdb-entry