PT-2026-20274 · WordPress · Frontend Post Submission Manager Lite

Kenneth Dunn · Published 2026-02-18 · Updated 2026-03-17 · CVE-2026-1296

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Frontend Post Submission Manager Lite plugin for WordPress versions through 1.2.7

Description The software contains a flaw that allows redirection to potentially malicious sites. This occurs because of inadequate validation of the requested page POST parameter within the verify username password function. An unauthenticated attacker can exploit this by tricking users into performing an action, such as clicking a link, which triggers the redirection.

Recommendations Update the Frontend Post Submission Manager Lite plugin to a version later than 1.2.7.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2026-1296

Affected Products

Frontend Post Submission Manager Lite

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2026-1296 · Security Note
• https://twitter.com/CVEnew/status/2023995922598789324 · Twitter Post
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3458652%40frontend-post-submission-manager-lite&new=3458652%40frontend-post-submission-manager-lite&sfp_email=&sfph_mail= · Note
• https://twitter.com/CVEarity/status/2024037088472232271 · Twitter Post
• https://plugins.trac.wordpress.org/browser/frontend-post-submission-manager-lite/trunk/includes/classes/class-fpsml-shortcode.php#L108 · Note
• https://plugins.trac.wordpress.org/browser/frontend-post-submission-manager-lite/tags/1.2.6/includes/classes/class-fpsml-shortcode.php#L108 · Note
• https://twitter.com/pdnuclei_bot/status/2033845834429997196 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2024082256961184254 · Twitter Post
• https://t.me/cveNotify/152274 · Telegram Post
• https://wordfence.com/threat-intel/vulnerabilities/id/92c52129-7cf5-4a1b-80a1-b01140e6a72b?source=cve · Note