CVE-2025-39544 — WordPress WP Tools plugin <= 5.18 - CSRF to Arbitrary File Deletion vulnerability

CVE-2025-39544

WordPress WP Tools plugin <= 5.18 - CSRF to Arbitrary File Deletion vulnerability PUBLISHED

Description (CNA)

Cross-Site Request Forgery (CSRF) vulnerability in sminozzi WP Tools wptools allows Path Traversal.This issue affects WP Tools: from n/a through <= 5.18.

Affected (CNA)

Vendor / product	Versions
sminozzi / WP Tools	affected 0 through 5.18

CWE

CWE-352

References

https://patchstack.com/database/Wordpress/Plugin/wptools/vulnerability/wordpress-wp-tools-plugin-5-18-csrf-to-arbitrary-file-deletion-vulnerability?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.