cve/2025/CVE-2025-5815.md
2025-09-29 21:09:30 +02:00

899 B

CVE-2025-5815

Description

The Traffic Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tfcm_maybe_set_bot_flags() function in all versions up to, and including, 3.2.2. This makes it possible for unauthenticated attackers to disabled bot logging.

POC

Reference

No PoCs from references.

Github