Limited Code Injection Vulnerability in Better Find and Replace Plugin for WordPress

CVE-2025-9334

What is CVE-2025-9334?

The Better Find and Replace – AI-Powered Suggestions plugin for WordPress has a vulnerability due to inadequate input validation within the 'rtafar_ajax' function. This flaw allows authenticated attackers with Subscriber-level access or higher to invoke arbitrary plugin functions, potentially executing unwanted code. The issue affects all versions up to and including 1.7.7, posing a risk for websites utilizing this plugin.

References