CVE-2025-3915
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Summary
CVE-2025-3915 is a vulnerability affecting the Aeropage Sync for Airtable plugin for WordPress. This issue allows authenticated attackers with Subscriber-level access or higher to delete arbitrary posts without proper capability checks on the 'aeropageDeletePost' function. The vulnerability exists in all versions up to and including 3.2.0, posing a significant risk to data security. Unauthorized deletion of posts can lead to data loss and potential disruption of website functionality. It is recommended that users of this plugin update to the latest version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.