A vulnerability, which was classified as critical, was found in SecuPress Free Plugin up to 2.3.9 on WordPress. Affected is the function
secupress_reinstall_plugins_admin_ajax_cb. The manipulation leads to missing authorization.
This vulnerability is traded as CVE-2025-3452. It is possible to launch the attack remotely. There is no exploit available.
