Plugin icon

Front End Users

front-end-only-users

Vulnerabilities:

11

Last Updated:

December 2, 2025

Active Installs:

500

Published
Title
Fixed in
CVSS
Published
2025-10-16
Title
Front End Users < 3.2.34 - Missing Authorization
Fixed in
Fixed in 3.2.34
CVSS
4.3 (medium)
Published
2025-09-22
Title
Front End Users <= 3.2.33 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
No known fix
CVSS
6.4 (medium)
Published
2025-05-15
Title
Front End Users <= 3.2.35 - Unauthenticated Information Exposure
Fixed in
No known fix
CVSS
5.3 (medium)
Published
2025-04-01
Title
Front-End-Only-Users < 3.2.33 - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 3.2.33
CVSS
9.8 (critical)
Published
2025-04-01
Title
Front End Users < 3.2.33 - Authenticated (Admin+) SQL injection
Fixed in
Fixed in 3.2.33
CVSS
4.9 (medium)
Published
2025-04-01
Title
Front End Users < 3.2.33 - Reflected XSS
Fixed in
Fixed in 3.2.33
CVSS
7.1 (high)
Published
2025-02-22
Title
Front End Users < 3.2.31 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.2.31
CVSS
6.4 (medium)
Published
2025-02-14
Title
Front End Users < 3.2.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via forgot-password Shortcode
Fixed in
Fixed in 3.2.31
CVSS
6.4 (medium)
Published
2024-08-28
Title
Front End Users < 3.2.29 - Authenticated (Contributor+) Time-Based SQL Injection
Fixed in
Fixed in 3.2.29
CVSS
8.8 (high)
Published
2024-08-28
Title
Front End Users < 3.2.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 3.2.29
CVSS
6.4 (medium)
Published
2023-07-17
Title
Front End Users < 3.2.25 - Cross-Site Request Forgery
Fixed in
Fixed in 3.2.25
CVSS
6.5 (medium)