A vulnerability was found in Search Exclude Plugin up to 2.4.9 on WordPress. It has been declared as problematic. Affected by this vulnerability is the function get_rest_permission of the component Setting Handler. The manipulation leads to missing authorization.

This vulnerability is known as CVE-2025-2821. The attack can be launched remotely. There is no exploit available.