CVE-2025-49431

Missing Authorization vulnerability in Gnuget MF Plus WPML mf-plus-wpml allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MF Plus WPML: from n/a through = 1.1...

CVE-2025-49431

CVE-2025-49431 concerns the WordPress MF Plus WPML plugin with versions ≤ 1.1, described as a Missing Authorization / Settings Change vulnerability. Connected sources confirm an access-control misconfiguration that allows unauthorized settings changes, with CVSS 3.1 vector: AV:N/AC:L/PR:N/UI:N/S:...

CVE-2025-49431 WordPress MF Plus WPML plugin <= 1.1 - Settings Change Vulnerability

Missing Authorization vulnerability in Gnuget MF Plus WPML mf-plus-wpml allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MF Plus WPML: from n/a through = 1.1...

PT-2025-27926 · Unknown · Gnuget Mf Plus Wpml

Name of the Vulnerable Software and Affected Versions: Gnuget MF Plus WPML versions 1.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Gnuget MF Plus WPML...

WordPress MF Plus WPML plugin <= 1.1 - Settings Change Vulnerability

Settings Change Vulnerability discovered by Mika in WordPress Plugin MF Plus WPML versions = 1.1...