Privilege Escalation Vulnerability in My WP Translate Plugin for WordPress

CVE-2025-8425

What is CVE-2025-8425?

The My WP Translate plugin is susceptible to unauthorized data manipulation due to a lack of crucial capability checks in the ajax_import_strings() function. This flaw affects all versions up to and including 1.1, allowing authenticated attackers with Subscriber-level access and higher to change site options. Exploitation of this vulnerability could enable attackers to alter the default registration role to administrator and activate user registration, facilitating unauthorized administrative access to compromised sites.

References