WP Tools Debug Log, Repair, Javascript errors, Jquery errors, Increase Maximum Limits, File Permissions, Transients, Error Log
wptools · plugin
Known security vulnerabilities for WP Tools Debug Log, Repair, Javascript errors, Jquery errors, Increase Maximum Limits, File Permissions, Transients, Error Log. Find out in seconds which version runs on your site with WP Lens.
3 known vulnerabilities
2 exploitable without logging in · latest Jun 6, 2025
Closed on wordpress.org
Removed from the directory on Jan 25, 2026 · reason: guideline violation. A closed component gets no more updates; installed copies keep running and their vulnerabilities stay open. Remove it or replace it with a maintained alternative.
wordpress.org status checked on Oct 2, 2026
Vulnerabilities
- High 8.8
CVE-2022-43453login required≤ 3.41
WordPress WP Tools plugin <= 3.41 - Auth. Broken Access Control vulnerability
- High 7.4
CVE-2025-39544unauthenticated · needs a click≤ 5.18
WordPress WP Tools plugin <= 5.18 - CSRF to Arbitrary File Deletion vulnerability
- Medium 4.3
CVE-2025-49273unauthenticated · needs a click≤ 5.24
WordPress WP Tools plugin <= 5.24 - Cross Site Request Forgery (CSRF) Vulnerability
The access label is read from the record's own text (e.g. “subscriber+”: subscriber and above). When the text names no role, CVSS decides between “login required” and “high privilege”; no role name is invented. “Needs a click”: the attack depends on a logged-in user following a link (CSRF, reflected XSS).