Beveiligingsadvies

CVE-2025-14913

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-25 23:20:02
Laatst bijgewerkt 2026-04-08 16:37:55
Toegewezen door Wordfence
CVSS-score 5.3
Status PUBLISHED

Beschrijving

The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to an incorrect authorization check on the 'media_delete_action' function in all versions up to, and including, 1.2.6. This makes it possible for unauthenticated attackers to delete arbitrary attachments.