CVE 9.8 CRITICAL

Prime Listing Manager <= 1.1 - Unauthenticated Privilege Escalation_CVE-2025-14892

9.8 / 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The Prime Listing Manager WordPress plugin through 1.1 allows an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized actions due to a hardcoded secret.

AI Analysis

Unauthenticated privilege escalation due to hardcoded secret in Prime Listing Manager WordPress plugin

Basic Information

ID CVE-2025-14892
Source WPScan
Published Feb 12, 2026 at 06:00
Modified Feb 12, 2026 at 14:27

Affected Product

Vendor Unknown
Product Prime Listing Manager
Affected Versions Unknown Prime Listing Manager 0

CWE Classification

AI Assessment

AI Score 9.8 / 10
AI Severity Critical
Vendor Unknown
Product Prime Listing Manager
Version 1.1

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.