CVE-2025-14397

Name of the Vulnerable Software and Affected Versions Postem Ipsum versions up to and including 3.0.1

Description The Postem Ipsum plugin for WordPress has a flaw that allows unauthorized modification of data, leading to privilege escalation. Attackers with Subscriber-level access or higher can create arbitrary user accounts with administrator privileges due to a missing capability check on the postem ipsum generate users() function.

Recommendations Update Postem Ipsum to a version later than 3.0.1.