{"action":"Upgrade wordpress to 6.1.9+dfsg1-0+deb12u1 or later.","affected":[{"fixed":"6.1.9+dfsg1-0+deb12u1","introduced":"0"}],"component":"wordpress","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["6.1.9+dfsg1-0+deb12u1"],"id":"tcs_01M5NP32CKQGAYKBK98V3F9Z6S","modified_at":"2026-10-23T17:47:46.583407797Z","published_at":"2025-09-23T18:15:37.660Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2025-58246","https://security-tracker.debian.org/tracker/CVE-2025-58246"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2025-58246","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2025-58246"}],"summary":"Insertion of Sensitive Information Into Sent Data vulnerability in WordPress allows Retrieve Embedded Sensitive Data. The WordPress Core security team is aware of the issue and is already working on a"}