Severity
Medium
Analysis Summary
CVE-2025-32228 CVSS:4.3
Ai Image Alt Text Generator for WP Plugin WordPress could allow a remote attacker to obtain sensitive information.
CVE-2025-32213 CVSS:6.5
Flo Forms Plugin for WordPress could allow a remote attacker to bypass security restrictions, caused by missing authorization vulnerability.
CVE-2025-32216 CVSS:6.4
Missing Authorization vulnerability in Spider Themes Spider Elements – Addons for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Spider Elements – Addons for Elementor: from n/a through 1.6.2. Plugin for WordPress could allow a remote attacker to bypass security restrictions, caused by missing authorization vulnerability.
Impact
- Security Bypass
- Information Disclosure
Indicators of Compromise
CVE
CVE-2025-32228
CVE-2025-32213
CVE-2025-32216
Affected Vendors
- WordPress
Affected Products
- WordPress Ai Image Alt Text Generator for WP Plugin for WordPress 1.0.8
- WordPress Flo Forms Plugin for WordPress 1.0.43
- WordPress Spider Elements – Addons for Elementor Plugin for WordPress 1.6.2
Remediation
Upgrade to the latest version for WordPress, available from the WordPress Plugin Directory.