CVE-2025-58659: WordPress Helpie FAQ plugin <= 1.45 - Sensitive Data Exposure vulnerability

Q: Who can exploit this issue?

The CVSS vector indicates it is remotely exploitable over the network with low attack complexity. It requires no privileges and no user interaction.

Q: What is the potential impact?

An attacker may be able to retrieve embedded sensitive data because of hard-coded credentials. The stated impact is limited to confidentiality; integrity and availability are not affected.

Q: Which installations are affected?

Helpie FAQ installations are affected through version 1.45, including versions from an unspecified starting point. The provided information does not identify any configuration prerequisite.

Published Sep 22, 2025

Updated

Use of Hard-coded Credentials vulnerability in Essekia Helpie FAQ allows Retrieve Embedded Sensitive Data. This issue affects Helpie FAQ: from n/a through 1.39.

Other sources

Use of Hard-coded Credentials vulnerability in Essekia Helpie FAQ helpie-faq allows Retrieve Embedded Sensitive Data.This issue affects Helpie FAQ: from n/a through <= 1.45.

— MITRE

Affected Software

1 affected component

Essekia Helpie FAQ<=1.45

Event History

Sep 22, 2025

CVE Published

via MITRE·06:23 PM

Data Sourced

via MITRE·06:23 PM

DescriptionWeakness

Data Sourced

via NVD·07:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The CVSS vector indicates it is remotely exploitable over the network with low attack complexity. It requires no privileges and no user interaction.

What is the potential impact?

An attacker may be able to retrieve embedded sensitive data because of hard-coded credentials. The stated impact is limited to confidentiality; integrity and availability are not affected.

Which installations are affected?

Helpie FAQ installations are affected through version 1.45, including versions from an unspecified starting point. The provided information does not identify any configuration prerequisite.

CVE-2025-58659: WordPress Helpie FAQ plugin <= 1.45 - Sensitive Data Exposure vulnerability

Other sources

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the potential impact?

Which installations are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the potential impact?

Which installations are affected?