Unauthorized Data Loss in Weglot Plugin for WordPress
CVE-2025-10008
5.3MEDIUM
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 30 October 2025
What is CVE-2025-10008?
The Weglot plugin for WordPress exhibits a vulnerability due to inadequate authorization checks in the 'clean_options' function. This flaw allows unauthenticated attackers to manipulate data by deleting critical transients associated with cached plugin settings. As a result, this can lead to potential disruption in the functionality and performance of the affected WordPress site, making it imperative for users to take immediate action to secure their installations against this exploit.
Affected Version(s)
Translate WordPress and go Multilingual – Weglot * <= 5.1