CVE-2025-12038 | Folderly Plugin up to 0.3 on WordPress REST API Endpoint clear-all-data improper authorization

October 31, 2025 Yanac

A vulnerability described as critical has been identified in Folderly Plugin up to 0.3 on WordPress. Impacted is an unknown function of the file /wp-json/folderly/v1/config/clear-all-data of the component REST API Endpoint. Executing manipulation can lead to improper authorization.

The identification of this vulnerability is CVE-2025-12038. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More