CVE-2021-25097

6.5 mediumEPSS 0.4%

Medium (6.5) in creativityjuice labtools. EPSS 0.4% chance of exploitation in the next 30 days.

The LabTools WordPress plugin through 1.0 does not have proper authorisation and CSRF check in place when deleting publications, allowing any authenticated users, such as subscriber to delete arbitrary publication

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
CWEs: CWE-352, CWE-863
Published: 2022-02-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

creativityjuice:labtools

References

https://wpscan.com/vulnerability/67f5beb8-2cb0-4b43-87c7-dead9c005f9c
https://wpscan.com/vulnerability/67f5beb8-2cb0-4b43-87c7-dead9c005f9c

Check your stack JSON