CVE-2019-15110

The wp-front-end-profile plugin before 0.2.2 for WordPress has XSS...

CVE-2019-15111

CVE-2019-15111 affects the WordPress plugin wp-front-end-profile before 0.2.2. The root cause is a permissions/ACL flaw in the plugin that lets an attacker modify a user profile via POST data, overwriting wp_capabilities and wp_user_level to escalate privileges to administrator. Some reports also...

CVE-2019-15110

CVE-2019-15110 affects the WordPress plugin wp-front-end-profile prior to 0.2.2. The vulnerability is cross-site scripting (XSS). Public exploit details (WP Front End Profile

CVE-2019-15110: Improper Neutralization of Input During Web Page Generation

The wp-front-end-profile plugin before 0.2.2 for WordPress has XSS...

PT-2019-13990

Name of the Vulnerable Software and Affected Versions wp-front-end-profile plugin versions prior to 0.2.2 Description The issue is related to a Cross-Site Scripting XSS problem. Recommendations For versions prior to 0.2.2, update to version 0.2.2 or later to resolve the issue...

CVE-2019-15111: Undefined Security Weakness

The wp-front-end-profile plugin before 0.2.2 for WordPress has a privilege escalation issue...

PT-2019-13991

Name of the Vulnerable Software and Affected Versions wp-front-end-profile versions prior to 0.2.2 Description The issue concerns a privilege escalation problem. Recommendations For versions prior to 0.2.2, update to version 0.2.2 or later to resolve the issue...

WP Front End Profile <= 0.2.1 - Privilege Escalation & Stored Cross-Site Scripting (XSS)

It is possible to modify a POST request to overwrite user meta including 'wpcapabilities' and 'wpuserlevel' which results in a privilege escalation vulnerability. User input is not sanitised or escaped on output resulting in a stored XSS vulnerability. Timeline: 2016-09-12: Vulnerability found...