CVE-2025-47580

CRITICAL 9.8CVE-2025-47580 · Published 15/05/2025 · updated 17/06/2026

Package	Affected versions	Patched versions
front end users etoilewebdesign	`≤ 3.2.32`	No fix yet

Description

Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Front End Users: from n/a through <= 3.2.35.

References

patchstack.com/database/Wordpress/Plugin/front-end-only-users/vulnerability/wordpress-front-end-users-plugin-3-2-32-sensitive-data-exposure-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free