{"data":{"id":"83e99467-f84f-4d1d-870b-faccbc1242b9","title":"CVE-2025-14486: The PixelPlay plugin for WordPress is vulnerable to unauthorized API key deletion due to missing authorization checks…","summary":"The PixelPlay plugin for WordPress lacks authorization checks in all versions up to and including 1.0.2, tracked as CVE-2025-14486. Unauthenticated attackers can delete arbitrary API keys for Pixabay, Unsplash, Pixels and OpenAI that site administrators configured, using the 'clear_api_type' parameter.","solution":"N/A -- no mitigation discussed in source.","labels":["security","industry"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-14486","publishedAt":"2026-09-22T08:16:35.857Z","cveId":"CVE-2025-14486","cweIds":["CWE-862"],"cvssScore":"5.3","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["PixelPlay WordPress plugin","OpenAI API key","Pixabay","Unsplash","Pixels"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"PixelPlay WordPress plugin unauthorized API key deletion via clear_api_type","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00315,"epssCheckedAt":"2026-11-10T12:15:59.727Z","kevDateAdded":null,"advisoryAliases":["GHSA-jrhq-q5jc-pgv2"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-08T06:09:38.321Z","patchAvailable":null,"disclosureDate":"2026-09-22T08:16:35.857Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-122"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity","availability"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}