Analysis Summary

CVE-2025-32228 CVSS:4.3

Ai Image Alt Text Generator for WP Plugin WordPress could allow a remote attacker to obtain sensitive information.

CVE-2025-32213 CVSS:6.5

Flo Forms Plugin for WordPress could allow a remote attacker to bypass security restrictions, caused by missing authorization vulnerability.

CVE-2025-32216 CVSS:6.4

Missing Authorization vulnerability in Spider Themes Spider Elements – Addons for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Spider Elements – Addons for Elementor: from n/a through 1.6.2. Plugin for WordPress could allow a remote attacker to bypass security restrictions, caused by missing authorization vulnerability.

Impact

• Security Bypass
• Information Disclosure

Indicators of Compromise

CVE

• CVE-2025-32228

• CVE-2025-32213

• CVE-2025-32216

Affected Vendors

Remediation

Upgrade to the latest version for WordPress, available from the WordPress Plugin Directory.

CVE-2025-32228

CVE-2025-32213

CVE-2025-32216