PT-2026-7819 · WordPress · Prime Listing Manager

Khaled Alenazi · Publicado 2026-02-12 · Atualizado 2026-02-12 · CVE-2025-14892

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Prime Listing Manager WordPress plugin versions through 1.1

Description The Prime Listing Manager WordPress plugin allows an attacker to gain administrative access without needing an account on the targeted site and perform unauthorized actions. This is due to a hardcoded secret.

Recommendations Update Prime Listing Manager WordPress plugin to a version newer than 1.1.

Exploit

Correção

Identificadores relacionados

CVE-2025-14892

Produtos afetados

Prime Listing Manager

Referências · 6

• 🔥 https://wpscan.com/vulnerability/d12332ec-1d0c-4ff5-94e0-7c4470bdb79c · Exploit
• https://t.me/cveNotify/151806 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/2021905423289217390 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-14892 · Nota de Segurança
• https://twitter.com/TheHackerWire/status/2021994136388481056 · Publicação no Twitter
• https://t.me/CVEtracker/44514 · Publicação no Telegram