CVE-2025-10303 in Library Management System Plugin
الملخص
بحسب MITRE • 15/10/2025
The Library Management System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the owt7_library_management_ajax_handler() function in all versions up to, and including, 3.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update and manipulate several of the plugin's settings and features.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.