Medium · 6.5 CVE-2025-49234 EUVD-2025-18534GHSA-pc3j-j44c-c6gw

WordPress WP Dummy Content Generator plugin <= 3.4.6 - Arbitrary User Deletion vulnerability

Published Jun 17, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Deepak Anand Product: WP Dummy Content Generator

Description

Missing Authorization vulnerability in Deepak anand WP Dummy Content Generator wp-dummy-content-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Dummy Content Generator: from n/a through <= 3.4.6.

Affected products

Vendor	Product	Affected	Fixed
Deepak anand	WP Dummy Content Generator	≤ 3.4.6	—

References

https://patchstack.com/database/Wordpress/Plugin/wp-dummy-content-generator/vulnerability/wordpress-wp-dummy-content-generator-plugin-3-4-6-arbitrary-user-deletion-vulnerability?_s_id=cve vdb-entry