CVE-2025-12177

A security flaw exists in WordPress plugins due to a hardcoded Cron key embedded within the deleteExpired and clearTempDataCPCron functions in versions prior to 3.3.30, allowing unauthorized access and enabling malicious users to inadvertently trigger scheduled tasks that remove outdated content and purge caches. This vulnerability can be exploited by attackers without authentication, resulting in unintended data removal.

Based on public CVE data (MITRE/NVD).