Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Prime Listing Manager WordPress plugin through 1.1 allows an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized actions due to a hardcoded secret.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2025-14892 Unauthenticated Admin Access in Prime Listing Manager WordPress Plugin https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-14892
Post summary
A newly disclosed vulnerability, CVE‑2025‑14892, enables unauthenticated administrators to access the Prime Listing Manager WordPress plugin, as announced via a link to Vulmon.
🔴 CVE-2025-14892 - Critical The Prime Listing Manager WordPress plugin through 1.1 allows an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized ac... https://www.thehackerwire.com/vulnerability/CVE-2025-14892/ https://t.co/aBzZHJXUcd
Post summary
The tweet announces a critical vulnerability in the Prime Listing Manager WordPress plugin that lets attackers obtain administrative access without an account, but provides only a high‑level description without details on exploitation or mitigation.