How to fix CVE-2025-10212?

Within 30 days: Identify affected systems running for WordPress is vulnerable to unauthorized access of data d and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Is PHP affected by CVE-2025-10212?

CVE-2025-10212 presents moderate security risk, a missing authorization vulnerability rated CVSS 5.3. Attackers could gain access beyond their authorized level. Organizations should apply vendor updates when available and monitor for exploitation.

CVE-2025-10212

EUVD-2025-32547 MEDIUM

2025-10-03 [email protected]

Authentication Bypass PHP WordPress

5.3

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 13, 2026 - 19:29 vuln.today

EUVD ID Assigned

Mar 13, 2026 - 19:29 euvd

EUVD-2025-32547

CVE Published

Oct 03, 2025 - 12:15 nvd

MEDIUM 5.3

DescriptionNVD

The SiteAlert (Formerly WP Health) plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.9.8. This makes it possible for unauthenticated attackers to view the site health information, including a list of installed and outdated plugins, PHP and Database version, etc.

AnalysisAI

CVE-2025-10212 is a security vulnerability (CVSS 5.3). Remediation should follow standard vulnerability management procedures.

Technical ContextAI

CWE-862 (Missing Authorization).

RemediationAI

Monitor vendor channels for patch availability.

CVE-2025-10212 vulnerability details – vuln.today

Back

CVE-2025-10212

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

Share

External POC / Exploit Code