The vulnerability identified as CVE-2025-64218 affects the Passster content-protector plugin by WP Chill, specifically versions up to and including 4.2.19. It allows an attacker to insert sensitive information into data sent by the plugin, which can then be retrieved, leading to exposure of confidential information. The CVSS 3.1 base score is 7.5, reflecting a network attack vector with low complexity, no privileges required, no user interaction, and a high impact on confidentiality. There is no indication of known exploits in the wild or cloud service involvement. No patch or remediation information is provided in the available data.

Successful exploitation results in disclosure of sensitive information embedded in data sent by the Passster plugin, compromising confidentiality. There is no reported impact on data integrity or system availability. The vulnerability can be exploited remotely without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor WP Chill's official channels for updates. Until a fix is available, consider limiting exposure by restricting access to the affected plugin or disabling it if feasible.