VulnSocial

CVE-2026-1296Disclosure

LOWCVSS 6.1 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

The Frontend Post Submission Manager Lite plugin for WordPress is vulnerable to Open Redirection in all versions up to, and including, 1.2.7 due to insufficient validation on the 'requested_page' POST parameter in the verify_username_password function. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action such as clicking on a link.

Back to dashboard
1.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-601

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 3 mentions (2026-02-18); latest day: 1
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-02-18: 3Mentions · 2026-03-17: 1PoC Mentioned / Linked · 2026-03-17: 1Technical Details · 2026-02-18: 2Technical Details · 2026-03-17: 102-1803-17
Signal classification3 categories
Disclosure
250.0%
General
125.0%
PoC
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-02-183
Disclosure2General1
2026-03-171
PoC1
Full discourse4 posts
  • pdnuclei-bot@pdnuclei_bot
    PoC

    🚨 CVE-2026-1296 - medium 🚨 Frontend Post Submission Manager Lite <= 1.2.7 - Open Redirect > The Frontend Post Submission Manager Lite plugin for WordPress is vulnerable to Open ... 👾 https://cloud.projectdiscovery.io/library/CVE-2026-1296 @pdnuclei #NucleiTemplates #cve

    Post summary

    The post announces CVE‑2026‑1296, flags it as a medium‑severity open‑redirect issue in Frontend Post Submission Manager Lite, and links to a Project Discovery library entry suggesting a PoC or Nuclei template, but provides no exploit code, patch, or evidence of active exploitation.

    00011138
    901 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-1296 Open Redirection Vulnerability in WordPress Frontend Post Submission Manager Lite Plugin https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1296

    Post summary

    The text announces the discovery of an open redirection flaw (CVE-2026-1296) in the WordPress Frontend Post Submission Manager Lite Plugin, without providing evidence of exploitation or remediation.

    0001031
    4.0K followersView on X
  • CVEarity@CVEarity
    General

    ⚡ New CVE Alert: CVE-2026-1296 📊 Severity: 6.1 🚨 Risk Level: Medium 🧩 Affects: Wordpress Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-1296 #CVE-2026-1296 #CVE #Medium #Wordpress #CyberSecurity #InfoSec https://t.co/5kXMdy7q8y

    Post summary

    A brief CVE alert for CVE-2026-1296 affecting WordPress, noting a medium severity score of 6.1, with no additional technical, exploit, or mitigation details provided.

    0000036
    56 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-1296 The Frontend Post Submission Manager Lite plugin for WordPress is vulnerable to Open Redirection in all versions up to, and including, 1.2.7 due to insufficient validat… https://www.cve.org/CVERecord?id=CVE-2026-1296

    Post summary

    The text announces that CVE-2026-1296 is an open redirection vulnerability in the Frontend Post Submission Manager Lite WordPress plugin up to version 1.2.7, with no PoC, exploit code, active exploitation, or patch details provided.

    00000135
    56.4K followersView on X

Explore more

Back to dashboard