CVE-2021-25097: Creativityjuice Labtools

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

The LabTools WordPress plugin through 1.0 does not have proper authorisation and CSRF check in place when deleting publications, allowing any authenticated users, such as subscriber to delete arbitrary publication

Affected products

• Creativityjuice Labtools: up to and including 1.0

Published 2022-02-01. Last modified 2026-06-17.