CVE-2025-11455

The Perfect Images plugin for WordPress (versions up to and including 7.2.0 ) is vulnerable to unauthorized data modification. The root cause is a missing capability check on the /wp-json/wp-retina-2x/v1/replace REST API. This flaw allows authenticated attackers with Author-level access or higher...