CVE-2025-14892

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-14892", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "state": "PUBLISHED", "assignerShortName": "WPScan", "dateReserved": "2025-12-18T15:36:43.798Z", "datePublished": "2026-02-12T06:00:05.732Z", "dateUpdated": "2026-04-02T12:39:55.100Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2026-04-02T12:39:55.100Z"}, "title": "Prime Listing Manager <= 1.1 - Unauthenticated Privilege Escalation", "problemTypes": [{"descriptions": [{"description": "CWE-269 Improper Privilege Management", "lang": "en", "type": "CWE"}]}], "affected": [{"vendor": "Unknown", "product": "Prime Listing Manager", "versions": [{"status": "affected", "versionType": "semver", "version": "0", "lessThanOrEqual": "1.1"}], "defaultStatus": "unknown"}], "descriptions": [{"lang": "en", "value": "The Prime Listing Manager WordPress plugin through 1.1 allows an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized actions due to a hardcoded secret."}], "references": [{"url": "https://wpscan.com/vulnerability/d12332ec-1d0c-4ff5-94e0-7c4470bdb79c/", "tags": ["exploit", "vdb-entry", "technical-description"]}], "credits": [{"lang": "en", "value": "Khaled Alenazi (Nxploited)", "type": "finder"}, {"lang": "en", "value": "WPScan", "type": "coordinator"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "WPScan CVE Generator"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-02-12T14:27:00.516588Z", "id": "CVE-2025-14892", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-12T14:27:04.380Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-14892", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-02-12T14:27:00.516588Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-12T14:26:33.743Z"}}], "cna": {"title": "Prime Listing Manager <= 1.1 - Unauthenticated Privilege Escalation", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Khaled Alenazi (Nxploited)"}, {"lang": "en", "type": "coordinator", "value": "WPScan"}], "affected": [{"vendor": "Unknown", "product": "Prime Listing Manager", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.1"}], "defaultStatus": "unknown"}], "references": [{"url": "https://wpscan.com/vulnerability/d12332ec-1d0c-4ff5-94e0-7c4470bdb79c/", "tags": ["exploit", "vdb-entry", "technical-description"]}], "x_generator": {"engine": "WPScan CVE Generator"}, "descriptions": [{"lang": "en", "value": "The Prime Listing Manager WordPress plugin through 1.1 allows an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized actions due to a hardcoded secret."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-269 Improper Privilege Management"}]}], "providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2026-04-02T12:39:55.100Z"}}}, "cveMetadata": {"cveId": "CVE-2025-14892", "state": "PUBLISHED", "dateUpdated": "2026-04-02T12:39:55.100Z", "dateReserved": "2025-12-18T15:36:43.798Z", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "datePublished": "2026-02-12T06:00:05.732Z", "assignerShortName": "WPScan"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "Prime Listing Manager", "vendor": "Unknown", "versions": [{"lessThanOrEqual": "1.1", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "contact@wpscan.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Prime Listing Manager WordPress plugin through 1.1 allows an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized actions due to a hardcoded secret."}, {"lang": "es", "value": "El plugin de WordPress Prime Listing Manager hasta la versi\u00f3n 1.1 permite a un atacante obtener acceso administrativo sin tener ning\u00fan tipo de cuenta en el sitio objetivo y realizar acciones no autorizadas debido a un secreto codificado de forma r\u00edgida."}], "id": "CVE-2025-14892", "lastModified": "2026-06-17T08:36:43.290", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-14892", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-02-12T14:27:00.516588Z", "version": "2.0.3"}}]}, "published": "2026-02-12T06:16:01.963", "references": [{"source": "contact@wpscan.com", "url": "https://wpscan.com/vulnerability/d12332ec-1d0c-4ff5-94e0-7c4470bdb79c/"}], "sourceIdentifier": "contact@wpscan.com", "vulnStatus": "Deferred"}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.1]"}}], "product": "prime_listing_manager", "vendor": "prime_listing_manager"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": null}], "product": "wordpress", "vendor": "wordpress"}], "analysis": {"en": {"generated_at": "2026-04-27T21:03:20.281560+00:00", "value": {"mitigation_remediation": ["Update Prime Listing Manager to the latest version where the hardcoded secret has been removed or disable the plugin until a fix is available", "Remove or neutralize the hardcoded secret within the plugin\u2019s configuration files and set strict file permissions to prevent unauthorized changes", "Configure a web application firewall to block known exploitation patterns targeting the plugin and restrict access to its administrative endpoints, while maintaining tighter firewall rules around the WordPress installation"], "summary": {"action": "Immediate Patch", "impact": "Privileged Escalation to Site Admin"}, "threat_synthesis": {"affected_systems": "The vulnerability affects the Prime Listing Manager plugin for WordPress up to and including version 1.1. Any installation using 1.1 or earlier is potentially exposed; no vendor or more granular version data is available beyond this range.", "description_and_impact": "The Prime Listing Manager WordPress plugin through version 1.1 contains a hardcoded secret that allows an attacker to gain administrative privileges without any user account. This flaw bypasses authentication entirely, enabling the attacker to perform any authorized action on the website, such as modifying content, configuring settings, or extracting data. The impact is therefore full control of the site, consistent with an authentication bypass and improper access control weakness.", "risk_and_exploitability": "The CVSS base score of 9.8 reflects a critical severity. An EPSS score of less than 1% indicates a low probability of exploitation at this time, though the flaw is known. The vulnerability is not listed in CISA KEV. Assuming a remote attacker can reach the WordPress site, exploitation can be achieved by sending crafted HTTP requests that trigger the plugin\u2019s hardcoded secret mechanism. Because no authenticated session is required beforehand, the attack vector is straightforward for anyone with network access to the host."}}}}, "created": "2026-02-12T09:01:59.133856+00:00", "updated": "2026-04-27T21:15:05.539758+00:00", "vendors": ["prime_listing_manager", "prime_listing_manager$PRODUCT$prime_listing_manager", "wordpress", "wordpress$PRODUCT$wordpress"], "weaknesses": ["CWE-284", "CWE-256"]}