PT-2025-53417

CVE-2025-14913

·

Published

2025-12-25

·

Updated

2026-10-05

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions Frontend Post Submission Manager Lite WordPress Plugin versions through 1.2.6
Description The Frontend Post Submission Manager Lite WordPress Plugin is affected by a flaw that allows unauthorized data loss. An incorrect authorization check within the media delete action function permits unauthenticated attackers to delete arbitrary attachments.
Recommendations Update the Frontend Post Submission Manager Lite WordPress Plugin to a version later than 1.2.6.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-862: Missing Authorization
Related identifiers
CVE-2025-14913
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com