CVE-2026-1296

Name of the Vulnerable Software and Affected Versions Frontend Post Submission Manager Lite plugin for WordPress versions through 1.2.7

Description The software contains a flaw that allows redirection to potentially malicious sites. This occurs because of inadequate validation of the requested page POST parameter within the verify username password function. An unauthenticated attacker can exploit this by tricking users into performing an action, such as clicking a link, which triggers the redirection.

Recommendations Update the Frontend Post Submission Manager Lite plugin to a version later than 1.2.7.