Wp Front End Profile Security Vulnerabilities and Issues — Wp Front End Profile CVE List

Wp Front End Profile ProjectWp Front End Profile

2 matches found

CVE•added 2019/08/21 12:2 p.m.•51 views

CVE-2019-15111

CVE-2019-15111 affects the WordPress plugin wp-front-end-profile before 0.2.2. The root cause is a permissions/ACL flaw in the plugin that lets an attacker modify a user profile via POST data, overwriting wp_capabilities and wp_user_level to escalate privileges to administrator. Some reports also...

9.8CVSS9.6AI score0.02076EPSS

Save

CVE•added 2019/08/21 12:1 p.m.•42 views

CVE-2019-15110

CVE-2019-15110 affects the WordPress plugin wp-front-end-profile prior to 0.2.2. The vulnerability is cross-site scripting (XSS). Public exploit details (WP Front End Profile

6.1CVSS6.4AI score0.00913EPSS

Save