This vulnerability in Ninja Tables (<= 5.2.5) involves the insertion of sensitive information into data sent by the plugin, which could allow an attacker with limited privileges to retrieve embedded sensitive data. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity and no user interaction required, but limited confidentiality impact and no integrity or availability impact. The vulnerability is published and assigned CVE-2026-25008 but lacks detailed technical or exploit information and no official patch or fix is referenced.

An attacker with low privileges can potentially cause sensitive information to be included in data sent by the Ninja Tables plugin, leading to limited confidentiality exposure. There is no impact on integrity or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is referenced, users should monitor for updates from Shahjahan Jewel and apply any official fixes once available. Until then, consider restricting access to the plugin or sensitive data as a precaution.