CVE-2025-2005

CVE-2025-2005 - اختراق إضافة Front-End Users في WordPress By h4ckxel معلومات سريعة الإضافة: Front-End Users الإصدارات الضعيفة: = 3.2.32 نوع الثغرة: رفع ملف عشوائي درجة CVSS: 10 حرج الخطر: يسمح لأي مهاجم دون مصادقة برفع ملفات عشوائية مثل شيلات PHP وتنفيذها عن بُعد، مما يعرض الخادم بالكامل للخطر. و...

WordPress Front End Users - Reflected XSS

WordPress Front End Users plugin = 3.2.32 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a...

CVE-2025-2005

استغلال رفع الملفات التعسفي في WordPress FEUP CVE-2025-2005 يوفر هذا المستودع استغلالًا PoC لإثبات المفهوم للمكوّن الإضافي Front End Users في WordPress الإصدارات حتى 3.2.32، والذي يعاني من ثغرة رفع ملفات تعسفي بسبب غياب التحقق من نوع MIME/نوع الملف في نموذج التسجيل الخاص به. يسمح ذلك للمهاجمين غي...

CVE-2025-2005

CVE-2025-2005 WordPress Front End Users Plugin = 3.2.32 معرض لثغرة تحميل الملفات التعسفي استغلال إضافة WordPress Front-End Users Plugin معلومات الثغرة اسم الإضافة : Front-End Users Plugin الإصدار المتأثر : = 3.2.32 نوع الثغرة : تحميل ملفات تعسفي CVSS Score : 10 حرج المخاطرة : تسمح هذه الثغرة...

CVE-2025-62072

Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users.This issue affects Front End Users: from n/a through = 3.2.33...

EUVD-2025-35366

Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users.This issue affects Front End Users: from n/a through = 3.2.33...

CVE-2025-62072

Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users.This issue affects Front End Users: from n/a through = 3.2.33...

CVE-2025-62072 WordPress Front End Users plugin <= 3.2.33 - Broken Access Control vulnerability

Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users.This issue affects Front End Users: from n/a through = 3.2.33...

CVE-2025-62072 WordPress Front End Users plugin <= 3.2.33 - Broken Access Control vulnerability

Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users.This issue affects Front End Users: from n/a through = 3.2.33...

CVE-2025-62072

CVE-2025-62072 is a missing/broken authorization vulnerability in the WordPress plugin Front End Users (WordPress Front End Users plugin) , affecting versions up to and including 3.2.33. The issue permits access control bypass (Broken Access Control) with no user interaction, as indicated by CVSS...

WordPress plugin Front End Users 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

WordPress Front End Users plugin <= 3.2.33 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Front End Users versions = 3.2.33...

EUVD-2024-51674

Malicious code in bioql PyPI...

EUVD-2023-38129

Malicious code in bioql PyPI...

EUVD-2023-37485

Malicious code in bioql PyPI...

EUVD-2025-5444

Malicious code in bioql PyPI...

CVE-2025-58235 WordPress Front End Users plugin <= 3.2.35 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rustaurius Front End Users front-end-only-users allows Stored XSS.This issue affects Front End Users: from n/a through = 3.2.35...

CVE-2025-58235 WordPress Front End Users plugin <= 3.2.35 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rustaurius Front End Users front-end-only-users allows Stored XSS.This issue affects Front End Users: from n/a through = 3.2.35...

WordPress plugin Front End Users 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2023-33322

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Etoile Web Design Front End Users allows Reflected XSS.This issue affects Front End Users: from n/a before 3.2.25...