syammohanm

Products

ProductCVEsExploitedLatest
WPFront Notification Bar2–Oct 3, 2026
WPFront User Role Editor2–Apr 8, 2025

Exploited and recent CVEs

  • CVE-2026-93896 Medium 6.1 WPFront Notification Bar <= 3.5.1 - Reflected Cross-Site Scripting via REQUEST_URI 0.2%
  • CVE-2025-3064 High 8.8 WPFront User Role Editor <= 4.2.1 - Cross-Site Request Forgery to Privilege Escalation via whitelist_options Function 0.3%
  • CVE-2024-2931 Medium 4.3 WPFront User Role Editor <= 3.2.1.11184 - Limited Information Exposure 0.5%
  • CVE-2024-0625 Medium 4.4 WPFront Notification Bar <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via wpfront-notification-bar-options[custom_class] 0.4%