PT-2025-53417 · WordPress · Frontend Post Submission Manager Lite

Md. Moniruzzaman Prodhan + 1 · Published 2025-12-25 · Updated 2025-12-26 · CVE-2025-14913

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Frontend Post Submission Manager Lite WordPress Plugin versions through 1.2.6

Description The Frontend Post Submission Manager Lite WordPress Plugin is affected by a flaw that allows unauthorized data loss. An incorrect authorization check within the media delete action function permits unauthenticated attackers to delete arbitrary attachments.

Recommendations Update the Frontend Post Submission Manager Lite WordPress Plugin to a version later than 1.2.6.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-14913

Affected Products

Frontend Post Submission Manager Lite

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-14913 · Security Note
• https://wordfence.com/threat-intel/vulnerabilities/id/19a6b19c-244d-4b30-8db2-b4d06a5f5509?source=cve · Note
• https://plugins.trac.wordpress.org/browser/frontend-post-submission-manager-lite/tags/1.2.6/includes/classes/class-fpsml-ajax.php#L91 · Note
• https://twitter.com/CVEnew/status/2004457746402533605 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2004356142441365517 · Twitter Post
• https://t.me/cveNotify/146838 · Telegram Post
• https://t.me/CVEtracker/40678 · Telegram Post
• https://plugins.trac.wordpress.org/changeset/3427082/frontend-post-submission-manager-lite · Note