CVE-2025-15369

The Xpro Addons plugin for WordPress has a security flaw that allows unauthorized access to its content editor feature due to inadequate permission checks in the get_content_editor function across all versions prior to and including 1.5.0, enabling malicious actors to create publicly accessible template designs without proper authentication. This vulnerability can be exploited by unauthenticated users.

Based on public CVE data (MITRE/NVD).