CVE-2025-23534

Summary

CVE-2025-23534 is a security vulnerability affecting the Mark Winiarski WPLingo plugin. This missing authorization issue permits exploitation due to incorrectly configured access control security levels. Attackers can leverage this weakness, present in versions from n/a to 1.1.2, to gain unauthorized access and potentially execute malicious actions. Users are urged to update their WPLingo plugin to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.