CVE-2025-5815

The Traffic Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tfcmmaybesetbotflags function in all versions up to, and including, 3.2.2. This makes it possible for unauthenticated attackers to disabled bot logging...

WordPress Traffic Monitor plugin <= 3.2.2 - Missing Authorization to Unauthenticated Settings Update vulnerability

Missing Authorization to Unauthenticated Settings Update vulnerability discovered by ch4r0n in WordPress Plugin Traffic Monitor versions = 3.2.2...

CVE-2025-5815

creationtimestamp| type| source ---|---|--- 2025-06-13 04:34:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18260 2025-06-13 05:40:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrhpyp34f723 2025-06-13 15:00:06+00:00| published-proof-of-concept|...