aharonyan
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WP Front User Submit / Front Editor | 3 | – | Jun 27, 2025 |
| Guest posting / Frontend Posting / Front Editor – WP Front User Submit | 2 | – | Jan 7, 2026 |
Exploited and recent CVEs
- CVE-2025-13419 Guest posting / Frontend Posting / Front Editor – WP Front User Submit <= 5.0.0 - Missing Authorization to Unauthenticated Media Deletion 0.3%
- CVE-2025-28988 WordPress WP Front User Submit / Front Editor plugin <= 4.9.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2025-52795 WordPress WP Front User Submit / Front Editor plugin <= 5.0.6 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
- CVE-2025-47617 WordPress WP Front User Submit / Front Editor plugin <= 5.0.6 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-2967 Guest posting / Frontend Posting wordpress plugin – WP Front User Submit / Front Editor <= 4.4.7 - Authenticated (Admin+) Stored Cross-Site Scripting 0.5%