Vulnerabilities CVE-2026-14568

CVE-2026-14568

None

Open

TLP:CLEAR

WP User Frontend < 4.3.8 - Unauthenticated Author-less Attachment Deletion

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

The User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration WordPress plugin before 4.3.8 does not correctly verify ownership before deleting an attachment, allowing unauthenticated attackers to permanently delete author-less attachments such as guest uploads and User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration WordPress plugin before 4.3.8-installed placeholder media.

Details

EPSS Score ⓘ: 0.20%

10.4th percentile
Confidence: 90%
Published: Jul 27, 2026
Last Modified: Jul 27, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.