CVE-2025-11191

The RealPress WordPress plugin before 1.1.0 registers the REST routes without proper permission checks, allowing the creation of pages and sending of emails from the site.

More information : https://wpscan.com/vulnerability/74f19ff2-d5c0-4bd4-83f2-688ea37022b1/