Unauthorized Data Modification in Listly WordPress Plugin
CVE-2025-5811
5.3MEDIUM
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 18 July 2025
What is CVE-2025-5811?
The Listly plugin for WordPress is susceptible to a vulnerability that allows unauthorized data modification due to a missing capability check in the Init() function. This flaw affects all versions up to and including 2.7, enabling unauthenticated attackers to delete arbitrary transient values from the site, which could lead to significant operational issues.
Affected Version(s)
Listly: Listicles For WordPress * <= 2.7