A vulnerability categorized as critical has been discovered in xpro Xpro Addons Plugin up to 1.5.0 on WordPress. The impacted element is the function
get_content_editor. Such manipulation leads to missing authorization.
This vulnerability is listed as CVE-2025-15369. The attack may be performed from remote. There is no available exploit.
