User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Attachment Deletion
CVE-2025-14047
Verified
Description
The WP User Frontend plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check in the Frontend_Form_Ajax::submit_post function. This makes it possible for unauthenticated attackers to delete attachment records through the plugin's AJAX handling when a public frontend form is available.
Severity
Medium
CVSS Score
5.3
Exploit Probability
1%
Affected Product
wp-user-frontend
Published Date
July 23, 2026
Template Author
iamatownboy
CVE-2025-14047.yaml
5.3Score
CVSS Metrics
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVE ID:
cve-2025-14047
CWE ID:
cwe-862
References
https://nvd.nist.gov/vuln/detail/CVE-2025-14047https://wpscan.com/vulnerability/e667278f-7563-4c58-ba82-a6d50e1a7a30/https://plugins.trac.wordpress.org/browser/wp-user-frontend/tags/4.2.2/includes/Ajax/Frontend_Form_Ajax.php#L35https://plugins.trac.wordpress.org/browser/wp-user-frontend/tags/4.2.2/includes/Ajax/Frontend_Form_Ajax.php#L55https://plugins.trac.wordpress.org/browser/wp-user-frontend/tags/4.2.2/includes/Ajax/Frontend_Form_Ajax.php#L133
Remediation Steps
Update WP User Frontend to version 4.2.5 or later.