CVE-2025-11191 – RealPress < 1.1.0 – Unauthenticated Content Creation/Email Sending via REST

CVE ID : CVE-2025-11191

Published : Oct. 31, 2025, 6:15 a.m. | 1 hour, 11 minutes ago

Description : The RealPress WordPress plugin before 1.1.0 registers the REST routes without proper permission checks, allowing the creation of pages and sending of emails from the site.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…