CVE-2025-12539 | TNC Toolbox Plugin up to 1.4.2 on WordPress cPanel API save_settings information disclosure

A vulnerability was found in TNC Toolbox Plugin up to 1.4.2 on WordPress. It has been declared as problematic. Impacted is the function Tnc_Wp_Toolbox_Settings::save_settings of the component cPanel API Handler. Such manipulation leads to information disclosure.

This vulnerability is referenced as CVE-2025-12539. It is possible to launch the attack remotely. No exploit is available.