CVE-2025-10742 | Truelysell Core Plugin up to 1.8.6 on WordPress Shortcode truelysell_edit_staff improper authentication

A vulnerability labeled as critical has been found in Truelysell Core Plugin up to 1.8.6 on WordPress. Affected by this issue is the function truelysell_edit_staff of the component Shortcode Handler. The manipulation results in improper authentication.

This vulnerability was named CVE-2025-10742. The attack may be performed from remote. There is no available exploit.