CVE-2025-13750

A security flaw exists in the Converter for Media plugin, affecting WordPress installations that utilize version 6.3.2 or earlier. The vulnerability arises from a lack of permission checks on a specific REST endpoint, allowing users with Subscriber-level access and above to delete optimized image files for any attachment without authorization.

Based on public CVE data (MITRE/NVD).