VYPR

Import Export With Custom Rest API

by WordPress

Source repositories

CVEs (1)

  • CVE-2025-5288CriJun 13, 2025
    risk 0.64cvss 9.8epss 0.01

    The REST API | Custom API Generator For Cross Platform And Import Export In WP plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the process_handler() function in versions 1.0.0 to 2.0.3. This makes it possible for unauthenticated…