Roxnor EmailKit Missing Authorization Vulnerability Allowing Arbitrary Content Deletion
Vulnerability
A missing authorization vulnerability in the Roxnor EmailKit WordPress plugin, affecting versions through 1.6.0, allows for arbitrary content deletion. This issue arises from incorrectly configured access control security levels, which could enable a malicious actor to delete various types of content from a website, such as posts, pages, or media.
Impact
Exploitation of this vulnerability could lead to unauthorized deletion of content from the affected WordPress site, including posts, pages, or media files.
Added: Sep 26, 2025, 10:03 AM
Updated: Sep 26, 2025, 3:30 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
5.2remediation
0.0relevance
0.6threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.