9.8
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
The Prime Listing Manager WordPress plugin through 1.1 allows an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized actions due to a hardcoded secret.
AI Analysis
Unauthenticated privilege escalation due to hardcoded secret in Prime Listing Manager WordPress plugin
Basic Information
ID
CVE-2025-14892
Source
WPScan
Published
Feb 12, 2026 at 06:00
Modified
Feb 12, 2026 at 14:27
Affected Product
Vendor
Unknown
Product
Prime Listing Manager
Affected Versions
Unknown Prime Listing Manager 0
CWE Classification
AI Assessment
AI Score
9.8 / 10
AI Severity
Critical
Vendor
Unknown
Product
Prime Listing Manager
Version
1.1