CVE Database /
CVE-2025-39544
CVE · High
CVE-2025-39544 — WP Tools Debug Log, Repair, Javascript errors, Jquery errors, Increase Maximum Limits, File Permissions, Transients, Error Log [wptools] < 5.19 (closed)
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2025-39544
|
WP Tools Debug Log, Repair, Javascript errors, Jquery errors, Increase Maximum Limits, File Permissions, Transients, Error Log [wptools] < 5.19 (closed) |
Cross-Site Request Forgery (CSRF) |
High
7.4
|
< 5.19
|
5.19 |
2025-04-16 |
—
|
CVE-2025-39544
The WP Tools plugin for WordPress contains a vulnerability in versions up to 5.18, which allows malicious actors to exploit Cross-Site Request Forgery by manipulating nonce validation in the deactivate_mu_plugin() function. As a result, attackers can trick site administrators into performing actions that enable them to rename arbitrary files, effectively deleting them. This issue arises from inadequate security checks on file operations.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings