Beveiligingsadvies

CVE-2026-14568

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-27 06:00:05

Laatst bijgewerkt 2026-07-27 17:35:40

Toegewezen door WPScan

CVSS-score 6.5

Status PUBLISHED

Beschrijving

The User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration WordPress plugin before 4.3.8 does not correctly verify ownership before deleting an attachment, allowing unauthenticated attackers to permanently delete author-less attachments such as guest uploads and User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration WordPress plugin before 4.3.8-installed placeholder media.

← Alle CVE's bekijken Bekijk op cve.org ↗