WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
frontend-dashboard
Published
2025-06-05
Title
Frontend Dashboard < 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
frontend-group-restriction-for-learndash
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
frontend-group-restriction-for-learndash
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
frontend-login-and-registration-blocks
Published
2025-04-23
Title
Frontend Login and Registration Blocks < 1.0.9 - Subscriber+ Privilege Escalation via Password Reset
Slug
frontend-login-and-registration-blocks
Published
2025-05-08
Title
Frontend Login and Registration Blocks < 1.2.0 - Unauthenticated Privilege Escalation via Account Takeover
Slug
frontend-post-submission
Published
2025-03-19
Title
Frontend Post Submission <= 1.0 - Reflected Cross-Site Scripting
Slug
frontend-post-submission-manager-lite
Published
2024-09-05
Title
Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin < 1.2.3 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
frontend-post-submission-manager-lite
Published
2025-12-20
Title
Frontend Post Submission Manager Lite < 1.2.6 - Missing Authorization to Unauthenticated Arbitrary Post Modification
Slug
frontend-post-submission-manager-lite
Published
2025-12-25
Title
Frontend Post Submission Manager Lite < 1.2.7 - Incorrect Authorization to Unauthenticated Arbitrary Attachment Deletion
Slug
frontend-post-submission-manager-lite
Published
2026-02-17
Title
Frontend Post Submission Manager Lite < 1.2.8 - Unauthenticated Open Redirect via 'requested_page' Parameter
Slug
frontend-registration-contact-form-7
Published
2024-06-03
Title
Frontend Registration – Contact Form 7 <= 5.1 - Authenticated (Editor+) Privilege Escalation
Slug
frontend-uploader
Published
2014-12-27
Title
Frontend Uploader < 0.9.4 - Unauthenticated Cross-Site Scripting (XSS)
Slug
frontend-uploader
Published
2021-09-21
Title
Frontend Uploader <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting
Slug
frontend-user-notes
Published
2026-02-17
Title
Frontend User Notes < 2.1.1 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Note Modification
Slug
frontend-user-notes
Published
2026-06-05
Title
Frontend User Notes < 2.2.0 - Cross-Site Request Forgery to Note Content Modification via 'confirmEdit' Action
Slug
frontier-post
Published
2014-08-01
Title
Frontier Post - Publishing Posts Security Bypass
Slug
frontier-post
Published
2023-11-23
Title
Frontier Post <= 6.1 - Cross-Site Request Forgery
Slug
frontis-blocks
Published
2026-01-23
Title
Frontis Blocks < 1.1.7 - Unauthenticated Server-Side Request Forgery via 'url' Parameter
Slug
frontis-blocks
Published
2026-01-20
Title
Frontis Blocks < 1.1.6 - Unauthenticated Server-Side Request Forgery
Slug
frontpage-category-filter
Published
2025-03-11
Title
Frontpage category filter <= 1.0.2 - Cross-Site Request Forgery
Slug
frontpage-manager
Published
2024-01-16
Title
Frontpage Manager <= 1.3 - Cross-Site Request Forgery via admin_page
Slug
fruitcake-horsemanager
Published
2024-11-08
Title
Horsemanager <= 1.3 - Authenticated (Contributor+) SQL Injection
Slug
fs-license-manager
Published
2026-02-26
Title
WooCommerce License Manager < 7.0.7 - Authenticated (Shop Manager+) Arbitrary File Upload
Slug
fs-poster
Published
2024-06-21
Title
FS Poster < 6.5.9 - Cross-Site Request Forgery
Slug
fs-poster
Published
2025-04-10
Title
FS Poster < 6.5.9 - Reflected Cross-Site Scripting