Unauthorized Data Loss in Vchasno Kasa Plugin for WordPress
CVE-2025-6720
5.3MEDIUM
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 19 July 2025
What is CVE-2025-6720?
The Vchasno Kasa plugin for WordPress has an issue that allows unauthorized individuals to clear log files due to a missing capability check in the clear_all_log() function. This vulnerability affects all versions up to and including 1.0.3, enabling unauthenticated attackers to manipulate logging data, which could lead to potential data loss and hinder the ability to monitor events within the application.
Affected Version(s)
MORKVA Vchasno Kasa Integration * <= 1.0.3