# CVE-2025-60188

## Summary

- **CVE ID:** CVE-2025-60188
- **Severity:** HIGH
- **CVSS Score:** 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
- **CWE:** CWE-201
- **Published:** Nov 6, 2025
- **Last Modified:** Apr 27, 2026

## Description

Insertion of Sensitive Information Into Sent Data vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Retrieve Embedded Sensitive Data.This issue affects Atarim: from n/a through <= 4.2.

## Affected Products

- Vito Peleg — Atarim (n/a)
- Vito Peleg — Atarim (0)

## References

- [CNA](https://patchstack.com/database/Wordpress/Plugin/atarim-visual-collaboration/vulnerability/wordpress-atarim-plugin-4-2-sensitive-data-exposure-vulnerability-2?_s_id=cve)
- [CISA-ADP](https://github.com/m4sh-wacker/CVE-2025-60188-Atarim-Plugin-Exploit)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 3.48%
- **EPSS Percentile:** 88.4

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._