Lucene search
+L

171 matches found

EUVD
EUVD
added 2025/10/03 8:07 p.m.16 views

EUVD-2023-37485

Malicious code in bioql PyPI...

7.1CVSS9.1AI score0.00379EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/22 6:23 p.m.3 views

CVE-2025-58235 WordPress Front End Users plugin <= 3.2.35 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rustaurius Front End Users front-end-only-users allows Stored XSS.This issue affects Front End Users: from n/a through = 3.2.35...

6.5CVSS5.9AI score0.00204EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/22 6:23 p.m.17 views

CVE-2025-58235 WordPress Front End Users plugin <= 3.2.35 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rustaurius Front End Users front-end-only-users allows Stored XSS.This issue affects Front End Users: from n/a through = 3.2.35...

6.5CVSS0.00204EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/22 12:00 a.m.7 views

WordPress plugin Front End Users 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.8AI score0.00204EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/08/28 12:00 a.m.20 views

Contao 安全漏洞

Contao is an open source Content Management System CMS developed in PHP by Contao Open Source. The system supports search engines, rights management, and CSS frameworks. A security vulnerability exists in Contao version 5.3.38 and versions prior to 5.6.1, which stems from the possibility of...

4.3CVSS6.5AI score0.00241EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/05/23 3:52 a.m.17 views

CVE-2023-33322

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Etoile Web Design Front End Users allows Reflected XSS.This issue affects Front End Users: from n/a before 3.2.25...

7.1CVSS8.6AI score0.00379EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/17 5:59 p.m.22 views

CVE-2025-47580

Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Front End Users: from n/a through = 3.2.35...

9.8CVSS7.2AI score0.00285EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/15 5:15 p.m.24 views

CVE-2025-47580

Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Front End Users: from n/a through = 3.2.35...

9.8CVSS0.00285EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/15 5:07 p.m.30 views

CVE-2025-47580 WordPress Front End Users plugin <= 3.2.35 - Broken Access Control vulnerability

Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Front End Users: from n/a through = 3.2.35...

5.4CVSS0.00285EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/15 5:07 p.m.61 views

CVE-2025-47580

CVE-2025-47580 (WordPress Front End Users plugin) : A Missing Authorization vulnerability exists in Front End Users up to version 3.2.32 that allows exploitation of misconfigured access control to access restricted information. A patch is available; update to 3.2.35+ (as noted by Patchstack) to r...

9.8CVSS7.2AI score0.00285EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/05/15 5:04 p.m.14 views

WordPress Front End Users plugin <= 3.2.35 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin Front End Users versions = 3.2.35...

9.8CVSS8.3AI score0.00285EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/05/15 12:00 a.m.14 views

WordPress plugin Front End Users 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS6.3AI score0.00285EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/15 12:00 a.m.11 views

PT-2025-21344 · Unknown · Rustaurius Front End Users

Name of the Vulnerable Software and Affected Versions: Rustaurius Front End Users versions 3.2.32 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions...

9.8CVSS6.2AI score0.00285EPSS
SaveExploits0References6
OSV
OSV
added 2025/04/22 6:15 a.m.9 views

CVE-2024-13569

The Front End Users WordPress plugin through 3.2.32 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS7.3AI score0.00533EPSS
SaveExploits1References1
NVD
NVD
added 2025/04/22 6:15 a.m.28 views

CVE-2024-13569

The Front End Users WordPress plugin through 3.2.32 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS0.00533EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/04/22 6:00 a.m.29 views

CVE-2024-13569 Front End Users <= 3.2.32 - Reflected XSS

The Front End Users WordPress plugin through 3.2.32 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

0.00533EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/04/22 6:00 a.m.13 views

CVE-2024-13569 Front End Users <= 3.2.32 - Reflected XSS

The Front End Users WordPress plugin through 3.2.32 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.2AI score0.00533EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/04/22 12:00 a.m.13 views

WordPress plugin Front End Users 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.1CVSS7AI score0.00533EPSS
SaveExploits1References1
Citrix
Citrix
added 2025/04/03 12:00 a.m.33 views

Citrix WEM User Logon Service is causing logon delay

End Users are reporting high logon times After the Logon breakup from Citrix Monitor page, most of the time is being taken during the Interactive Session Phase When looked at the Logon process from the Desktop side, delay is observed at "Please wait for the Citrix WEM User Logon Service" stage...

7.1AI score
SaveExploits0
OSV
OSV
added 2025/04/02 10:15 a.m.8 views

CVE-2025-2005

The Front End Users plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the file uploads field of the registration form in all versions up to, and including, 3.2.32. This makes it possible for unauthenticated attackers to upload arbitrary files on t...

9.8CVSS7.9AI score0.21793EPSS
SaveExploits3References2
Rows per page
Query Builder