CVE-2025-10040 | WP Import Plugin up to 7.27 on WordPress Credentials get_ftp_details authorization

A vulnerability, which was classified as problematic, was found in WP Import Plugin up to 7.27 on WordPress. This vulnerability affects the function get_ftp_details of the component Credentials Handler. Executing manipulation can lead to missing authorization.

This vulnerability appears as CVE-2025-10040. The attack may be performed from remote. There is no available exploit.