What is GHSA-p8fm-59wc-5xxj?

GHSA-p8fm-59wc-5xxj is a security advisory published by GitHub Security Advisories with unknown severity. The User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership ...

Which CVE IDs does GHSA-p8fm-59wc-5xxj cover?

GHSA-p8fm-59wc-5xxj covers the following CVE IDs: CVE-2026-14568. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-p8fm-59wc-5xxjunknown

The User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership ...

Vendor

GitHub Security Advisories

Published

July 27, 2026

Last Modified

July 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-14568 →

📋 Description

The User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration WordPress plugin before 4.3.8 does not correctly verify ownership before deleting an attachment, allowing unauthenticated attackers to permanently delete author-less attachments such as guest uploads and User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration WordPress plugin before 4.3.8-installed placeholder media.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-14568
https://wpscan.com/vulnerability/dcbc2a0c-6fa6-4266-9292-0a1f3418da08
https://github.com/advisories/GHSA-p8fm-59wc-5xxj