EUVD-2025-203229

🗓️ 13 Dec 2025 18:30:21Reported by EUVDType

Postem Ipsum plugin up to 3.0.1 lets subscribers become administrators due to lacking capability check.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-14397	13 Dec 202511:05	–	circl
CNNVD	WordPress plugin Postem Ipsum 安全漏洞	13 Dec 202500:00	–	cnnvd
CVE	CVE-2025-14397	13 Dec 202504:31	–	cve
Cvelist	CVE-2025-14397 Postem Ipsum <= 3.0.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation in postem_ipsum_generate_users	13 Dec 202504:31	–	cvelist
NVD	CVE-2025-14397	13 Dec 202516:16	–	nvd
Patchstack	WordPress Postem Ipsum plugin <= 3.0.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation in postem_ipsum_generate_users vulnerability	16 Dec 202518:01	–	patchstack
Positive Technologies	PT-2025-51071	13 Dec 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-14397	14 Dec 202505:03	–	redhatcve
Vulnrichment	CVE-2025-14397 Postem Ipsum <= 3.0.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation in postem_ipsum_generate_users	13 Dec 202504:31	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 8, 2025 to December 14, 2025)	19 Dec 202517:57	–	wordfence

[
  {
    "enisaIdVendor": [
      {
        "id": "e42146b5-650f-3e2c-beb5-659c64ca21b7",
        "vendor": {
          "name": "franciscopalacios"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "ddd59b1a-b2d1-380d-b8bc-746d596996eb",
        "product": {
          "name": "Postem Ipsum"
        },
        "product_version": "* ≤3.0.1"
      }
    ]
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/229c146d-3f99-4f63-9a6f-997075846815
plugins	www.plugins.trac.wordpress.org/browser/postem-ipsum/trunk/admin/postem-ipsum-admin.php
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-14397

13 Dec 2025 18:30Current

4.8Medium risk

Vulners AI Score4.8

CVSS 3.18.8

EPSS0.00056