CVE-2025-10008: Translate WordPress and go Multilingual – Weglot <= 5.1 - Missing Authorization to Unauthenticated Limited Transient Deletion
The Translate WordPress and go Multilingual – Weglot plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'cleanoptions' function in all versions up to, and including, 5.1. This makes it possible for unauthenticated attackers to delete limited transients that contain cached plugin options.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10008?
CVE-2025-10008 is considered a high severity vulnerability due to the risk of unauthorized data loss.
How do I fix CVE-2025-10008?
To fix CVE-2025-10008, update the Weglot Translate WordPress and go Multilingual plugin to version 5.2 or higher.
Who is affected by CVE-2025-10008?
CVE-2025-10008 affects all versions of the Weglot Translate WordPress and go Multilingual plugin up to and including 5.1.
What is the impact of CVE-2025-10008?
The impact of CVE-2025-10008 includes unauthorized loss of data due to a missing capability check.
Can CVE-2025-10008 be exploited remotely?
Yes, CVE-2025-10008 can be exploited remotely by unauthenticated attackers.