Skip to content
Noroxi

wpfront records

6 published records for vendor wpfront.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2021-24984
    24Monitor

    WPFront User Role Editor < 3.2.1.11184 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 1%

    wpfront · wpfront user role editorDec 27, 2021

  • CVE-2021-24601
    21Monitor

    WPFront Notification Bar < 2.1.0.08087 - Authenticated Stored XSS

    MediumCVSS 5.4No exploitEPSS 1%

    wpfront · wpfront notification barSep 6, 2021

  • CVE-2021-24564
    21Monitor

    WPFront Scroll Top < 2.0.6.07225 - Authenticated Stored XSS

    MediumCVSS 5.4No exploitEPSS 1%

    wpfront · scroll topAug 23, 2021

  • CVE-2021-24518
    19Monitor

    WPFront Notification Bar < 2.0.0.07176 - Authenticated Stored XSS

    MediumCVSS 4.8No exploitEPSS 1%

    wpfront · notification barAug 16, 2021

  • CVE-2024-0625
    19Monitor

    WPFront Notification Bar <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via wpfront-notification-bar-options[custom_class]

    MediumCVSS 4.8No exploitEPSS 0%

    wpfront · wpfront notification barJan 24, 2024

  • CVE-2024-2931
    17Monitor

    WPFront User Role Editor <= 3.2.1.11184 - Limited Information Exposure

    MediumCVSS 4.3No exploitEPSS 1%

    wpfront · wpfront user role editorApr 2, 2024