cleantalk
Vulnerabilities and Security Researches

Ultimate WordPress Auction Plugin, CVE-2025-66125

CVE, Research URL

CVE-2025-66125

Published on
Dec 16, 2025
Research Description
Insertion of Sensitive Information Into Sent Data vulnerability in Nitesh Ultimate Auction ultimate-auction allows Retrieve Embedded Sensitive Data.This issue affects Ultimate Auction : from n/a through <= 4.3.2.
Affected versions
max 4.3.2.
Status
vulnerable