CVE-2025-14047 | WP User Frontend Plugin up to 4.2.4 on WordPress Attachment Deletion submit_post authorization

A vulnerability labeled as critical has been found in WP User Frontend Plugin up to 4.2.4 on WordPress. The affected element is the function Frontend_Form_Ajax::submit_post of the component Attachment Deletion Handler. Such manipulation leads to missing authorization.

This vulnerability is documented as CVE-2025-14047. The attack can be executed remotely. There is not any exploit available.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.