CVE-2025-14047

MEDIUMNuclei

WP User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2025-14047 has a selected CVSS score of 5.3 (medium); EIP currently links 1 Nuclei template.

Description

The Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submission – WP User Frontend plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'Frontend_Form_Ajax::submit_post' function in all versions up to, and including, 4.2.4. This makes it possible for unauthenticated attackers to delete attachment.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 5, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration

Browse wedevs / User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration

Default status: unaffected

CVE ListThrough 4.2.4affected

Nuclei templates

1
ProjectDiscoveryMEDIUMUser Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Attachment DeletionCVSS 5.3

The WP User Frontend plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check in the Frontend_Form_Ajax::submit_post function. This makes it possible for unauthenticated attackers to delete attachment records through the plugin's AJAX handling when a public frontend form is available.

Impact

Unauthenticated attackers can delete attachment records, causing data loss for media uploaded through frontend submission forms.

Remediation

Update WP User Frontend to version 4.2.5 or later.

WeaknessesCWE-862
Authorsiamatownboy
Template tagscvecve2025wordpresswpwp-pluginuser-frontendwpufauthorization-bypassunauthajax
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
https://nvd.nist.gov/vuln/detail/CVE-2025-14047 https://wpscan.com/vulnerability/e667278f-7563-4c58-ba82-a6d50e1a7a30/ https://plugins.trac.wordpress.org/browser/wp-user-frontend/tags/4.2.2/includes/Ajax/Frontend_Form_Ajax.php#L35 https://plugins.trac.wordpress.org/browser/wp-user-frontend/tags/4.2.2/includes/Ajax/Frontend_Form_Ajax.php#L55 https://plugins.trac.wordpress.org/browser/wp-user-frontend/tags/4.2.2/includes/Ajax/Frontend_Form_Ajax.php#L133

Source: ProjectDiscovery

References

5