Skip to content
Noroxi

Front End Users

front-end-only-users · plugin

Known security vulnerabilities for Front End Users. Find out in seconds which version runs on your site with WP Lens.

11 known vulnerabilities

2 critical · 1 with public exploit code · latest Oct 22, 2025

Vulnerabilities

  • CVE-2025-47580

    WordPress Front End Users plugin <= 3.2.35 - Broken Access Control vulnerability

    Critical 9.8

  • CVE-2025-2005

    Front-End-Only-Users <= 3.2.32 - Unauthenticated Arbitrary File Upload

    Critical 9.8

  • CVE-2024-7607

    Front End Users <= 3.2.28 - Authenticated (Contributor+) Time-Based SQL Injection

    High 8.8

  • CVE-2023-34005

    WordPress Front End Users Plugin <= 3.2.24 is vulnerable to Cross Site Request Forgery (CSRF)

    High 8.8

  • CVE-2025-58235

    WordPress Front End Users plugin <= 3.2.35 - Cross Site Scripting (XSS) vulnerability

    Medium 6.5

  • CVE-2023-33322→ 3.2.25

    WordPress Front End Users plugin < 3.2.25 - Cross Site Scripting (XSS) vulnerability

    Medium 6.1

  • CVE-2025-26877

    WordPress Front End Users Plugin <= 3.2.30 - Cross Site Scripting (XSS) vulnerability

    Medium 5.4

  • CVE-2024-13563

    Front End Users <= 3.2.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via forgot-password Shortcode

    Medium 5.4

  • CVE-2024-7606

    Front End Users <= 3.2.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    Medium 5.4

  • CVE-2024-12410

    Front End Users <= 3.2.32 - Authenticated (Admin+) SQL injection

    Medium 4.9

  • CVE-2025-62072

    WordPress Front End Users plugin <= 3.2.33 - Broken Access Control vulnerability

    Medium 4.3

← Back to directory