Extension WordPress

Vulnérabilités Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin

Cette page rassemble les failles publiées pour Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin, leurs plages de versions affectées et les correctifs signalés dans la base locale.

4Vulnérabilités
0Critiques
4Avec correctif
6,1CVSS maximal

Historique de sécurité

CVE et vulnérabilités de Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin

4 fiches

CVE-2026-1296 Moyenne · 6,1
Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin

Frontend Post Submission Manager Lite <= 1.2.7 – Unauthenticated Open Redirect via 'requested_page' Parameter

The Frontend Post Submission Manager Lite plugin for WordPress is vulnerable to Open Redirection in all versions up to, and including, 1.2.7 due to insufficient validation on the 'requested_page' POST parameter in the verify_username_password function. This makes it…

Versions affectées

1.0.0-1.2.7

Correctif

1.2.8

Publication

17/02/2026

CVE-2025-14913 Moyenne · 5,3
Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin

Frontend Post Submission Manager Lite <= 1.2.6 – Incorrect Authorization to Unauthenticated Arbitrary Attachment Deletion

The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to an incorrect authorization check on the 'media_delete_action' function in all versions up to, and including,…

Versions affectées

*-1.2.6

Correctif

1.2.7

Publication

25/12/2025

CVE-2025-14080 Moyenne · 5,3
Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin

Frontend Post Submission Manager Lite <= 1.2.5 – Missing Authorization to Unauthenticated Arbitrary Post Modification

The Frontend Post Submission Manager Lite plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.2.5. This is due to missing authorization checks on the post update functionality in the fpsml_form_process AJAX…

Versions affectées

*-1.2.5

Correctif

1.2.6

Publication

20/12/2025

CVE-2024-8427 Moyenne · 4,3
Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin

Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin <= 1.2.2 – Missing Authorization to Authenticated (Subscriber+) Settings Update

The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_global_settings and process_form_edit functions in all versions up to,…

Versions affectées

*-1.2.2

Correctif

1.2.3

Publication

05/09/2024

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités