WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
frontend-admin
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
frontend-admin
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
frontend-checklist
Published
2024-06-05
Title
Frontend Checklist <= 2.3.2 - Admin+ Stored XSS
Slug
frontend-checklist
Published
2024-06-05
Title
Frontend Checklist <= 2.3.2 - Admin+ Stored XSS via Items
Slug
frontend-dashboard
Published
2024-03-25
Title
Frontend Dashboard < 2.2.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
frontend-dashboard
Published
2024-04-22
Title
Frontend Dashboard < 2.2.4 -
Slug
frontend-dashboard
Published
2024-09-09
Title
Frontend Dashboard < 2.2.5 - Authenticated (Subscriber+) Arbitrary Function Call
Slug
frontend-dashboard
Published
2025-04-22
Title
Frontend Dashboard < 2.2.6 - Unauthenticated SQL Injection
Slug
frontend-dashboard
Published
2025-05-06
Title
Frontend Dashboard 1.0 - 2.2.6 - Unauthenticated Privilege Escalation via fed_wp_ajax_fed_login_form_post Function
Slug
frontend-dashboard
Published
2025-05-12
Title
Frontend Dashboard 1.5.10 - 2.2.7 - Subscriber+ Account Takeover/Privilege Escalation via ajax_request Function
Slug
frontend-dashboard
Published
2025-05-12
Title
Frontend Dashboard 1.0 - 2.2.7 - Subscriber+ Privilege Escalation via fed_admin_setting_form_function Function
Slug
frontend-dashboard
Published
2025-06-05
Title
Frontend Dashboard < 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
frontend-group-restriction-for-learndash
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
frontend-group-restriction-for-learndash
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
frontend-login-and-registration-blocks
Published
2025-04-23
Title
Frontend Login and Registration Blocks < 1.0.9 - Subscriber+ Privilege Escalation via Password Reset
Slug
frontend-login-and-registration-blocks
Published
2025-05-08
Title
Frontend Login and Registration Blocks < 1.2.0 - Unauthenticated Privilege Escalation via Account Takeover
Slug
frontend-post-submission
Published
2025-03-19
Title
Frontend Post Submission <= 1.0 - Reflected Cross-Site Scripting
Slug
frontend-post-submission-manager-lite
Published
2024-09-05
Title
Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin < 1.2.3 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
frontend-post-submission-manager-lite
Published
2025-12-20
Title
Frontend Post Submission Manager Lite < 1.2.6 - Missing Authorization to Unauthenticated Arbitrary Post Modification
Slug
frontend-post-submission-manager-lite
Published
2025-12-25
Title
Frontend Post Submission Manager Lite < 1.2.7 - Incorrect Authorization to Unauthenticated Arbitrary Attachment Deletion
Slug
frontend-registration-contact-form-7
Published
2024-06-03
Title
Frontend Registration – Contact Form 7 <= 5.1 - Authenticated (Editor+) Privilege Escalation
Slug
frontend-uploader
Published
2014-12-27
Title
Frontend Uploader < 0.9.4 - Unauthenticated Cross-Site Scripting (XSS)
Slug
frontend-uploader
Published
2021-09-21
Title
Frontend Uploader <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting
Slug
frontier-post
Published
2014-08-01
Title
Frontier Post - Publishing Posts Security Bypass
Slug
frontier-post
Published
2023-11-23
Title
Frontier Post <= 6.1 - Cross-Site Request Forgery