Security Advisory
CVE-2025-12170
5.3
MEDIUM
Vulnerability Description
The Checkbox plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'wp_ajax_nopriv_checkbox_clean_log' AJAX endpoint in all versions up to, and including, 2.8.10. This makes it possible for unauthenticated attackers to clear log files.
Published Date
November 21, 2025
Official Source
NIST NVD Advisory