CVE-2025-26877

Description

References

• patchstack.com/database/Wordpress/Plugin/front-end-only-users/vulnerability/wordpress-front-end-users-plugin-3-2-30-cross-site-scripting-xss-vulnerability · Third Party Advisory

Altre vulnerabilità di front end users

• CVE-2025-47580CRITICO 9.8Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users allows Exploiting Incorrectly Configured Access Contr…
• CVE-2024-13569ALTO 7.1The Front End Users WordPress plugin through 3.2.32 does not sanitise and escape a parameter before outputting it back in the page, leading …
• CVE-2025-2005CRITICO 9.8The Front End Users plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the file uploads fie…
• CVE-2024-12410MEDIO 4.9The Front End Users plugin for WordPress is vulnerable to SQL Injection via the 'UserSearchField' parameter in all versions up to, and inclu…
• CVE-2024-13563MEDIO 5.4The Front End Users plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's forgot-password shortcode in all vers…