CVE-2025-11255 | Password Policy Manager Plugin up to 2.0.5 on WordPress AJAX Endpoint moppm_ajax authorization

October 24, 2025 Yanac

A vulnerability classified as problematic was found in Password Policy Manager Plugin up to 2.0.5 on WordPress. Impacted is the function moppm_ajax of the component AJAX Endpoint. Such manipulation leads to missing authorization.

This vulnerability is referenced as CVE-2025-11255. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More