A vulnerability categorized as critical has been discovered in WP Framework Plugin up to 1.0.14 on WordPress. Affected is the function
cwp_addons_update_plugin_cb of the component Plugin Installation Handler. Executing manipulation can lead to missing authorization.
This vulnerability is handled as CVE-2025-10706. The attack can be executed remotely. There is not any exploit available.
