Lucene search
+L

27 matches found

Positive Technologies
Positive Technologies
added 2025/11/24 12:00 a.m.10 views

PT-2025-47885

The Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.0 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue...

6.8AI score0.00196EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/11/24 12:00 a.m.8 views

WordPress plugin Guest posting / Frontend Posting / Front Editor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability...

4.7CVSS6.2AI score0.00196EPSS
SaveExploits0References2
NVD
NVD
added 2024/09/06 7:15 a.m.30 views

CVE-2024-8427

The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveglobalsettings and processformedit functions in all versions up to, and including, 1.2.2. This makes i...

4.3CVSS0.00323EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/09/06 12:00 a.m.14 views

PT-2024-39004 · WordPress · Frontend Post Submission Manager Lite – Frontend Posting Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin versions up to, and including, 1.2.2 Description: The issue allows authenticated attackers with Subscriber-level access and above to update the plugin's settings an...

4.3CVSS7AI score0.00323EPSS
SaveExploits0References10
WPVulnDB
WPVulnDB
added 2024/04/29 12:00 a.m.16 views

Guest posting / Frontend Posting wordpress plugin – WP Front User Submit / Front Editor <= 4.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting

Description The Guest posting / Frontend Posting wordpress plugin – WP Front User Submit / Front Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form settings in all versions up to, and including, 4.4.1 due to insufficient input sanitization and output escaping. This...

4.4CVSS5.8AI score0.00462EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2022/02/28 12:00 a.m.13 views

WordPress Guest posting / Frontend Posting wordpress plugin – WP Front User Submit / Front Editor plugin <= 3.4.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Guest posting / Frontend Posting wordpress plugin – WP Front User Submit / Front Editor plugin versions = 3.4.0. Solution Update the WordPress Guest posting / Frontend Posting wordpress plugin – WP Fro...

2.8AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:00 a.m.14 views

WordPress Guest posting / Frontend Posting wordpress plugin – WP Front User Submit / Front Editor plugin <= 3.4.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Guest posting / Frontend Posting wordpress plugin – WP Front User Submit / Front Editor plugin versions = 3.4.0. Solution Update the WordPress Guest posting / Frontend Posting wordpress plugin – WP Front User Submit / Front...

1.3AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder