Advisories · Technology

sminozzi WP Tools.

Every CVE that names sminozzi WP Tools among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-49273 CVE record

CVSS 4.3 Medium

WordPress WP Tools plugin <= 5.24 - Cross Site Request Forgery (CSRF) Vulnerability
- sminozzi WP Tools
- Cross-site request forgery (CSRF)
Not analysed yet 6 Jun 2025
CVE-2025-39544 CVE record

CVSS 7.4 High

WordPress WP Tools plugin <= 5.18 - CSRF to Arbitrary File Deletion vulnerability
- sminozzi WP Tools
- Cross-site request forgery (CSRF)
Not analysed yet 16 Apr 2025