Vvinoth06

Products

Exploited and recent CVEs

• CVE-2025-12879 High 8.8 User Generator and Importer <= 1.2.2 - Cross-Site Request Forgery to Privilege Escalation via Arbitrary Administrator Account Creation 0.2%
• CVE-2025-4474 High 8.8 Frontend Dashboard 1.0 - 2.2.7 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via fed_admin_setting_form_function Function 0.4%
• CVE-2025-4473 High 8.8 Frontend Dashboard 1.5.10 - 2.2.7 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via ajax_request Function 0.5%
• CVE-2025-4104 Critical 9.8 Frontend Dashboard 1.0 - 2.2.6 - Missing Authorization to Unauthenticated Privilege Escalation via fed_wp_ajax_fed_login_form_post Function 0.6%
• CVE-2024-8268 High 8.8 Frontend Dashboard <= 2.2.4 - Authenticated (Subscriber+) Arbitrary Function Call 0.7%
• CVE-2024-32726 High 7.5 WordPress Frontend Dashboard plugin <= 2.2.2 - Sensitive Data Exposure on PII vulnerability 0.7%
• CVE-2024-29775 Medium 6.5 WordPress Frontend Dashboard plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability 0.4%