← back
CVE-2025-14892

Prime Listing Manager <= 1.1 - Unauthenticated Privilege Escalation

CVSS 9.8 CRITICALEPSS 0.4%
The Prime Listing Manager WordPress plugin through 1.1 allows an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized actions due to a hardcoded secret.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →