My WP Translate, CVE-2025-8423

CVE, Research URL: CVE-2025-8423
Home page URL: Security reports for My WP Translate
Application: My WP Translate
Published on: Sep 11, 2025
Research Description: The My WP Translate plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the mtswpt_remove_plugin() and ajax_update_export_code() functions in all versions up to, and including, 1.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read and delete arbitrary WordPress options which can cause a denial of service.
Affected versions: max 1.1.
Status: vulnerable