Vulnerability CVE-2025-64253

  • Martin Sauter

    (@martinsauter)


    2 weeks, 1 day ago

    This plugin has a vulnerability with a severity of «medium» that has been reported about half a year ago already:

    https://www.cve.org/CVERecord?id=CVE-2025-64253

    It’s hard to understand why a plugin by the user «wordpress.org» with 300’000 active installs has still not been fixed. Is this a false alarm? Can anyone please look into this?

Viewing 2 replies - 1 through 2 (of 2 total)
Viewing 2 replies - 1 through 2 (of 2 total)

You must be logged in to reply to this topic.