CVE-2025-8423 is a missing authorization vulnerability (CWE-862) in the My WP Translate plugin for WordPress. The functions mtswpt_remove_plugin() and ajax_update_export_code() lack proper capability checks, enabling authenticated users with low privileges (Subscriber and above) to read and delete arbitrary WordPress options. This can disrupt site functionality and cause denial of service. The issue affects all versions up to and including 1.1. No patch or official fix information is provided in the data.

An attacker with Subscriber-level access or higher can exploit this vulnerability to read and delete arbitrary WordPress options, potentially causing denial of service by disrupting site configuration or operation. There is no indication of confidentiality impact or known exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict user roles to trusted individuals only and monitor for suspicious activity related to option modifications. Avoid granting Subscriber or higher privileges to untrusted users.