CVE-2025-49273

The WP Tools Repair plugin for WordPress has a security flaw that affects all versions up to 5.24, allowing malicious individuals to deceive administrators into executing unintended actions by exploiting a weakness in the validation process of certain functions. This vulnerability stems from inadequate or misconfigured checks for a specific type of security token. As a result, an attacker can manipulate a site's administrator into performing unauthorized tasks simply by tricking them into clicking on a link.

Based on public CVE data (MITRE/NVD).