The vulnerability identified as CVE-2025-64258 affects the wpweb Follow My Blog Post plugin, allowing an attacker with network access to retrieve sensitive system information without authentication or user interaction. The affected versions include all releases up to 2.3.9. The CVSS 3.1 base score is 7.5, indicating high severity, with an attack vector of network, low attack complexity, no privileges required, and no user interaction needed. The impact is confidentiality loss only, with no integrity or availability impact reported. There is no vendor advisory or patch information available, and no known exploits have been reported.

The vulnerability allows unauthorized disclosure of sensitive system information, which could aid attackers in further attacks or reconnaissance. There is no reported impact on integrity or availability. No known exploits are currently active in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the affected plugin and monitor for unusual activity related to information disclosure. Avoid exposing the plugin to untrusted networks.