CVE-2025-14907

Name of the Vulnerable Software and Affected Versions Moderate Selected Posts plugin for WordPress versions up to and including 1.4

Description The Moderate Selected Posts plugin for WordPress is susceptible to Cross-Site Request Forgery. This is caused by a lack of nonce verification within the msp admin page() function. An unauthenticated attacker could potentially modify plugin settings by forging a request, provided they can trick a site administrator into performing an action, such as clicking a malicious link.

Recommendations Update the Moderate Selected Posts plugin to a version newer than 1.4.