Skip to content
OpenAdvisories

Vendor

infosatech

5 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2025-14172 Public exploit

    WP Page Permalink Extension <= 1.5.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Rewrite Rules Flush

    The WP Page Permalink Extension plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.5.4. This is due to missing authorization checks on the `cwpp_trigger_flush_rewrite_rules` function hooked to `wp_ajax_cwpp_tri…