CVE-2026-39688: Missing Authorization

Missing Authorization vulnerability in Glowlogix WP Frontend Profile wp-front-end-profile allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Frontend Profile: from n/a through = 1.3.9...

CVE-2026-1644: Cross-Site Request Forgery (CSRF)

The WP Frontend Profile plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.8. This is due to missing nonce validation on the 'updateaction' function. This makes it possible for unauthenticated attackers to approve or reject user account...

EUVD-2023-56196

Malicious code in bioql PyPI...

CVE-2023-51483

Improper Privilege Management vulnerability in Glowlogix WP Frontend Profile allows Privilege Escalation.This issue affects WP Frontend Profile: from n/a through 1.3.1...

PT-2024-14142 · Glowlogix · Glowlogix Wp Frontend Profile

Name of the Vulnerable Software and Affected Versions: Glowlogix WP Frontend Profile versions 1.3.1 and earlier Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in Glowlogix WP Frontend Profile. Recommendations: For Glowlogix WP Frontend Profile...

CVE-2023-51483: Improper Privilege Management

Improper Privilege Management vulnerability in Glowlogix WP Frontend Profile allows Privilege Escalation.This issue affects WP Frontend Profile: from n/a through 1.3.1...

WordPress WP Frontend Profile Plugin <= 1.3.1 is vulnerable to Privilege Escalation

Software WP Frontend Profile Type Plugin Vulnerable versions = 1.3.1 Fixed in 1.3.2 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-51483 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 33e16067363a Credits Raf...