Frontend Post Submission Manager Lite – Guest Post and Frontend Submission Forms
Frontend Post Submission Manager Lite – Guest Post and Frontend Submission Forms has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 5 are fixed as of October 2026. Their average CVSS score is 5.6, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2026 was the busiest year with 2 disclosures.
The most common weakness is Missing Authorization, behind 3 of the records (60%). Other recurring categories include Cross-Site Scripting, Open Redirect.
Every one of the 5 issues recorded for Frontend Post Submission Manager Lite – Guest Post and Frontend Submission Forms has a vendor fix available, so running the current release closes all known holes.
4 independent researchers contributed these findings, most of them (2) reported by Md. Moniruzzaman Prodhan (NomanProdhan). Frontend Post Submission Manager Lite – Guest Post and Frontend Submission Forms is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2026-96649Frontend Post Submission Manager Lite <= 1.3.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via post_content Parameter (data-label DOM Sink)
Read the full analysisVulnerability Records

Frontend Post Submission Manager Lite – Guest Post and Frontend Submission Forms
Author
WP Shuffle
Publish your first frontend submission form in four steps: choose a ready-to-use form, configure its fields, add the shortcode to a page, and submit a test entry. Frontend Post Submission Manager Lite gives WordPress sites a practical frontend workflow for standard posts. Start with a guest form or a login-required form, then decide which fields appear, how submitted posts are handled, and who receives notifications—without building a custom form system. Start With a Ready-to-Use Form After activation, the Quick Start guide points administrators through the first-success path: Choose the Guest Post Form or Login Require Form. Configure labels, required fields, post status, notifications, and spam protection. Publish the form using its shortcode. Submit a test entry and confirm the expected post status. What Lite Includes Guest and login-required frontend forms for standard WordPress posts A drag-and-drop form builder Unlimited simple text and textarea custom fields Five pre-designed frontend templates Frontend preview and Ajax submission Configurable post status, author, format, character limits, and form components Administrator and submitter email notifications Success redirection Google reCAPTCHA or Cloudflare Turnstile spam protection Translation-ready strings and developer documentation Privacy When deactivating the plugin, users may optionally submit feedback. No feedback is sent unless the user chooses to submit it. If submitted, the selected reason, optional message, plugin version, WordPress version, and PHP version may be emailed to the plugin team to help improve the plugin. Lite Is Best For Guest post submission on a blog or magazine Community article collection Logged-in contributor submission A straightforward frontend workflow for standard WordPress posts Upgrade to Pro When You Need Choose Pro for workflows beyond Lite’s standard-post and simple-field scope: Unlimited forms Advanced field types, including select, checkbox, radio, date, file, URL, telephone, YouTube, hidden, and WYSIWYG fields Custom post types and custom taxonomies A frontend post management dashboard Submission limits and advanced workflow controls PayPal payments for frontend submissions Twenty or more pre-designed templates Direct image upload to the post content editor Check all Frontend Post Submission Manager premium features here Upgrade to Pro To explore Pro, please go here To view the demo, please go here
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C