Plugin icon

WP Frontend Profile

wp-front-end-profile

Vulnerabilities:

7

Last Updated:

February 21, 2026

Active Installs:

200

Published
Title
Fixed in
CVSS
Published
2026-03-06
Title
WP Frontend Profile < 1.3.9 - Cross-Site Request Forgery to Unauthorized User Account Approval or Rejection
Fixed in
Fixed in 1.3.9
CVSS
4.3 (medium)
Published
2026-02-23
Title
Frontend Profile <= 1.3.9 - Missing Authorization
Fixed in
No known fix
CVSS
5.3 (medium)
Published
2023-12-27
Title
WP Frontend Profile < 1.3.2 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 1.3.2
CVSS
9.8 (critical)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.3.1
CVSS
6.1 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 1.2.6
CVSS
4.3 (medium)
Published
2020-05-19
Title
WP Frontend Profile < 1.2.2 - CSRF Check Incorrectly Implemented
Fixed in
Fixed in 1.2.2
CVSS
3.1 (low)
Published
2016-09-14
Title
WP Front End Profile <= 0.2.1 - Privilege Escalation & Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 0.2.2
CVSS
9.8 (critical)