CVE-2025-49431

creationtimestamp| type| source ---|---|--- 2025-07-07 17:15:32+00:00| seen| Telegram/NHPXRe01dha6kjJBIKxpl3uHjM0hMSIHqvKeT9iip-rL-wk...

CVE-2025-49431

CVE-2025-49431 concerns the WordPress MF Plus WPML plugin with versions ≤ 1.1, described as a Missing Authorization / Settings Change vulnerability. Connected sources confirm an access-control misconfiguration that allows unauthorized settings changes, with CVSS 3.1 vector: AV:N/AC:L/PR:N/UI:N/S:...

CVE-2025-49431 WordPress MF Plus WPML plugin <= 1.1 - Settings Change Vulnerability

Missing Authorization vulnerability in Gnuget MF Plus WPML mf-plus-wpml allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MF Plus WPML: from n/a through = 1.1...

WordPress MF Plus WPML plugin <= 1.1 - Settings Change Vulnerability

Settings Change Vulnerability discovered by Mika in WordPress Plugin MF Plus WPML versions = 1.1...