Skip to content
Threat Feed
Subscribe

Product

Profitori (2.0.6.0-2.1.1.3)

1 brief RSS
critical threat

Unauthenticated Privilege Escalation in Profitori WordPress Plugin

The Profitori plugin for WordPress, versions 2.0.6.0 through 2.1.1.3, contains a critical vulnerability (CVE-2025-4631) that allows unauthenticated remote attackers to escalate user privileges to Administrator via the REST API.

exploited Profitori
1r 2t 1c