PT-2026-7819 · WordPress · Prime Listing Manager

Khaled Alenazi · CVE-2025-14892 · Published 2026-02-12 · Updated 2026-02-12

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Prime Listing Manager WordPress plugin versions through 1.1

Description The Prime Listing Manager WordPress plugin allows an attacker to gain administrative access without needing an account on the targeted site and perform unauthorized actions. This is due to a hardcoded secret.

Recommendations Update Prime Listing Manager WordPress plugin to a version newer than 1.1.

Exploit

Fix

Related Identifiers

CVE-2025-14892

Affected Products

Prime Listing Manager

References · 6

• 🔥 https://wpscan.com/vulnerability/d12332ec-1d0c-4ff5-94e0-7c4470bdb79c · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-14892 · Security Note
• https://t.me/cveNotify/151806 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2021905423289217390 · Twitter Post
• https://twitter.com/TheHackerWire/status/2021994136388481056 · Twitter Post
• https://t.me/CVEtracker/44514 · Telegram Post