CVE-2025-12014 | NGINX Cache Optimizer Plugin up to 1.1 on WordPress Setting authorization

October 24, 2025 Yanac

A vulnerability described as critical has been identified in NGINX Cache Optimizer Plugin up to 1.1 on WordPress. This issue affects some unknown processing of the component Setting Handler. Executing manipulation can lead to missing authorization.

This vulnerability is registered as CVE-2025-12014. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More