CVE-2025-14080

🗓️ 21 Dec 2025 02:20:30Reported by WordfenceType

CVE-2025-14080: Unauthenticated arbitrary post modification in Frontend Post Submission Manager Lite up to 1.2.5 via post_id.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-14080	21 Dec 202505:17	–	circl
CNNVD	WordPress plugin Frontend Post Submission Manager Lite 安全漏洞	21 Dec 202500:00	–	cnnvd
Cvelist	CVE-2025-14080 Frontend Post Submission Manager Lite <= 1.2.5 - Missing Authorization to Unauthenticated Arbitrary Post Modification	21 Dec 202502:20	–	cvelist
EUVD	EUVD-2025-204651	21 Dec 202503:31	–	euvd
NVD	CVE-2025-14080	21 Dec 202503:15	–	nvd
Patchstack	WordPress Frontend Post Submission Manager Lite plugin <= 1.2.5 - Missing Authorization to Unauthenticated Arbitrary Post Modification vulnerability	31 Dec 202500:00	–	patchstack
Positive Technologies	PT-2025-52576	21 Dec 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-14080	22 Dec 202502:35	–	redhatcve
Vulnrichment	CVE-2025-14080 Frontend Post Submission Manager Lite <= 1.2.5 - Missing Authorization to Unauthenticated Arbitrary Post Modification	21 Dec 202502:20	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 15, 2025 to January 4, 2026)	8 Jan 202618:20	–	wordfence

Vulners

Node

wpshuffle frontend_post_submission_manager_lite_frontend_posting_wordpress_pluginRange≤1.2.5wordpress

[
  {
    "vendor": "wpshuffle",
    "product": "Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.2.5",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/frontend-post-submission-manager-lite/trunk/includes/cores/ajax-process-form.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/3e9b6514-e727-42fe-8893-a317b71b2760
plugins	www.plugins.trac.wordpress.org/changeset
plugins	www.plugins.trac.wordpress.org/browser/frontend-post-submission-manager-lite/tags/1.2.5/includes/cores/ajax-process-form.php

17 Jun 2026 08:35Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.15.3

EPSS0.0024

SSVC

CWE-862