Plugin icon

Guest posting / Frontend Posting / Front Editor – WP Front User Submit

front-editor

Vulnerabilities:

10

Last Updated:

February 16, 2026

Active Installs:

200

Published
Title
Fixed in
CVSS
Published
2026-02-18
Title
WP Front User Submit < 5.0.6 - Unauthenticated Sensitive Information Exposure
Fixed in
Fixed in 5.0.6
CVSS
5.9 (medium)
Published
2026-01-06
Title
Guest posting / Frontend Posting / Front Editor – WP Front User Submit < 5.0.1 - Missing Authorization to Unauthenticated Media Deletion
Fixed in
Fixed in 5.0.1
CVSS
5.3 (medium)
Published
2025-11-03
Title
WP Front User Submit < 5.0.0 - Open Redirect
Fixed in
Fixed in 5.0.0
CVSS
4.3 (medium)
Published
2025-06-23
Title
WP Front User Submit / Front Editor < 4.9.4 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.9.4
CVSS
6.1 (medium)
Published
2025-06-19
Title
WP Front User Submit / Front Editor <= 5.0.6 - Cross-Site Request Forgery
Fixed in
No known fix
CVSS
4.3 (medium)
Published
2025-05-07
Title
WP Front User Submit / Front Editor <= 5.0.6 - Admin+ Stored XSS
Fixed in
No known fix
CVSS
3.5 (low)
Published
2024-04-29
Title
Front Editor < 4.4.8 - Admin+ Stored XSS
Fixed in
Fixed in 4.4.8
CVSS
3.5 (low)
Published
2023-08-02
Title
Front Editor < 4.4.5 - Admin+ Stored XSS
Fixed in
Fixed in 4.4.5
CVSS
3.5 (low)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.0.4
CVSS
6.1 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 3.4.1
CVSS
4.3 (medium)