CVE-2025-10008 is a missing authorization vulnerability (CWE-862) in the Translate WordPress with Weglot plugin. The vulnerability arises because the 'clean_options' function lacks a capability check, enabling unauthenticated attackers to delete limited transients that store cached plugin options. This can lead to unauthorized data loss by removing cached configuration data. The vulnerability affects all plugin versions up to 5.1. The CVSS 3.1 base score is 5.3 (medium), with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, but integrity impact is low.

An attacker without authentication can delete certain cached plugin options, resulting in unauthorized loss of data related to the plugin's cached settings. There is no direct confidentiality or availability impact reported. The integrity of plugin configuration data is affected at a low level. No known exploits exist in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, administrators should monitor plugin updates from the vendor. Consider restricting access to the WordPress installation and plugin files to trusted users only to reduce risk. No official patch or workaround is currently documented.