The vulnerability identified as CVE-2025-55715 affects the Themeisle Otter - Gutenberg Block plugin up to version 3.1.0. It involves the insertion of sensitive information into data sent by the plugin, which can be retrieved by an attacker without authentication or user interaction. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) indicates network attack vector, low attack complexity, no privileges or user interaction required, unchanged scope, and high confidentiality impact with no integrity or availability impact. No patch or official vendor advisory is currently available to confirm remediation status.

An attacker can remotely retrieve sensitive embedded data from the affected plugin without any privileges or user interaction, leading to a high confidentiality breach. There is no impact on data integrity or availability. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or limiting use of the affected plugin to reduce exposure to sensitive data leakage.