https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T00:25:08.978629+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-14913 CVE-2025-14913 — Frontend Post Submission Manager Lite <= 1.2.6 - Incorrect Authorization to Unauthenticated Arbitrary Attachment Deleti… 2026-10-07T00:25:08.997526+00:00

Affected: wpshuffle Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin

The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to an incorrect authorization check on the 'media_delete_action' function in all versions up to, and including, 1.2.6. This makes it possible for unauthenticated attackers to delete arbitrary attachments.