171 matches found
WordPress Front End Users - Reflected XSS
WordPress Front End Users plugin = 3.2.32 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a...
CVE-2025-2005
CVE-2025-2005 - Взлом плагина Front-End Users для WordPress Автор: h4ckxel Краткая информация Плагин: Front-End Users Уязвимые версии: = 3.2.32 Тип уязвимости: Произвольная загрузка файлов Оценка CVSS: 10 Критический Риск: Позволяет любому неавторизованному злоумышленнику загружать произвольные...
CVE-2025-2005
Эксплойт произвольной загрузки файлов WordPress FEUP CVE-2025-2005 Этот репозиторий содержит PoC-эксплойт для плагина WordPress Front End Users версии до 3.2.32, уязвимого к произвольной загрузке файлов из-за отсутствия проверки MIME/типа файла в форме регистрации. Это позволяет...
CVE-2025-2005
CVE-2025-2005 WordPress Front End Users 插件 = 3.2.32 存在任意文件上传漏洞 WordPress Front-End Users 插件漏洞利用 漏洞信息 插件名称 ：Front-End Users Plugin 受影响版本 ：= 3.2.32 漏洞类型 ：任意文件上传 CVSS 评分 ：10（严重） 风险 ：该漏洞允许未经认证的攻击者上传任意文件（例如 PHP Web Shell），并可远程执行这些文件。这可在服务器上实现完全代码执行，导致服务器被完全控制。 漏洞描述 该漏洞存在于 Front-End Users...
CVE-2026-22646
Certain error messages returned by the application expose internal system details that should not be visible to end users, providing attackers with valuable reconnaissance information like file paths, database errors, or software versions that can be used to map the application's internal structu...
CVE-2026-22646
Certain error messages returned by the application expose internal system details that should not be visible to end users, providing attackers with valuable reconnaissance information like file paths, database errors, or software versions that can be used to map the application's internal structu...
PT-2025-48077
Name of the Vulnerable Software and Affected Versions Contao versions 4.0.0 through 4.13.56 Contao versions 5.3.0 through 5.3.41 Contao versions 5.6.0 through 5.6.4 Description Backend users with control over template closures can execute arbitrary PHP functions without required parameters. The...
CVE-2025-62072
Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users.This issue affects Front End Users: from n/a through = 3.2.33...
EUVD-2025-35366
Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users.This issue affects Front End Users: from n/a through = 3.2.33...
CVE-2025-62072
Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users.This issue affects Front End Users: from n/a through = 3.2.33...
CVE-2025-62072 WordPress Front End Users plugin <= 3.2.33 - Broken Access Control vulnerability
Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users.This issue affects Front End Users: from n/a through = 3.2.33...
CVE-2025-62072 WordPress Front End Users plugin <= 3.2.33 - Broken Access Control vulnerability
Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users.This issue affects Front End Users: from n/a through = 3.2.33...
CVE-2025-62072
CVE-2025-62072 is a missing/broken authorization vulnerability in the WordPress plugin Front End Users (WordPress Front End Users plugin) , affecting versions up to and including 3.2.33. The issue permits access control bypass (Broken Access Control) with no user interaction, as indicated by CVSS...
WordPress plugin Front End Users 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
WordPress Front End Users plugin <= 3.2.33 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Front End Users versions = 3.2.33...
EUVD-2023-0514
Malicious code in bioql PyPI...
EUVD-2024-51674
Malicious code in bioql PyPI...
EUVD-2022-2437
Malicious code in bioql PyPI...