CVE-2025-49910

CVE-2025-49910 affects the WordPress plugin WPGuppy (wpguppy-lite) up to version 1.1.4. The issue is a missing authorization that allows access to functionality not properly constrained by ACLs, per Red Hat, NVD/CVE records, and third-party advisories. Affected versions are listed as