CVE-2025-6213 | Nginx Cache Purge Preload Plugin up to 2.1.1 on WordPress nppp_preload_cache_on_update HTTP_REFERERER privilege escalation

A vulnerability has been found in Nginx Cache Purge Preload Plugin up to 2.1.1 on WordPress and classified as critical. This vulnerability affects the function nppp_preload_cache_on_update. The manipulation of the argument HTTP_REFERERER leads to privilege escalation.

This vulnerability was named CVE-2025-6213. The attack can be initiated remotely. There is no exploit available.