Frontend Post Submission Manager Lite – Frontend Posting Wordpress Plugin
Approved changes feed: RSS · Atom
cpe:2.3:a:wpshuffle:frontend_post_submission_manager_lite_–_frontend_posting_wordpress_plugin:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Wpshuffle (448c6adb-b937-54a2-b1ef-0dee6b90be3e) |
|---|---|
| Product | Frontend Post Submission Manager Lite – Frontend Posting Wordpress Plugin (914c3ac3-370f-5469-aabf-2975975741db) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-1296 |
vulnerable | 2026-06-08 07:49:08.201392 |
Frontend Post Submission Manager Lite <= 1.2.7 - Unauthenticated Open Redirect via 'requested_page' Parameter
MEDIUM (6.1)
The Frontend Post Submission Manager Lite plugin for WordPress is vulnerable to Open Redirection in all versions up to, and including, 1.2.7 due to insufficient validation on the 'requested_page' POST parameter in the verify_username_password function. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action such as clicking on a link.
Published: 2026-02-18T04:35:43.878Z
Updated: 2026-02-18T20:47:37.114Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14913 |
vulnerable | 2026-06-08 07:06:35.350936 |
Frontend Post Submission Manager Lite <= 1.2.6 - Incorrect Authorization to Unauthenticated Arbitrary Attachment Deletion
MEDIUM (5.3)
The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to an incorrect authorization check on the 'media_delete_action' function in all versions up to, and including, 1.2.6. This makes it possible for unauthenticated attackers to delete arbitrary attachments.
Published: 2025-12-25T23:20:02.743Z
Updated: 2026-04-08T16:37:55.266Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14080 |
vulnerable | 2026-06-08 07:06:33.550634 |
Frontend Post Submission Manager Lite <= 1.2.5 - Missing Authorization to Unauthenticated Arbitrary Post Modification
MEDIUM (5.3)
The Frontend Post Submission Manager Lite plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.2.5. This is due to missing authorization checks on the post update functionality in the fpsml_form_process AJAX action. This makes it possible for unauthenticated attackers to modify arbitrary posts by providing a post_id parameter via the guest posting form, allowing them to change post titles, content, excerpts, and remove post authors.
Published: 2025-12-21T02:20:30.792Z
Updated: 2026-04-08T16:47:57.152Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8427 |
vulnerable | 2026-06-08 07:00:24.605174 |
Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin <= 1.2.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update
MEDIUM (4.3)
The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_global_settings and process_form_edit functions in all versions up to, and including, 1.2.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's settings and forms.
Published: 2024-09-06T06:50:54.701Z
Updated: 2026-04-08T17:30:32.835Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.