CVE-2025-14172 | WP Page Permalink Extension Plugin up to 1.5.4 on WordPress cwpp_trigger_flush_rewrite_rules authorization

January 9, 2026 Yanac

A vulnerability labeled as critical has been found in WP Page Permalink Extension Plugin up to 1.5.4 on WordPress. Impacted is the function cwpp_trigger_flush_rewrite_rules. The manipulation results in missing authorization.

This vulnerability is cataloged as CVE-2025-14172. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More