Front End Users vulnerabilities

3 known vulnerabilities in Front End Users from Rustaurius. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Front End Users: Missing Authorization

  CVE-2025-47580May 15, 2025Rustaurius

  Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Front End Users: from n/a through <= 3.2.35.

• 9.8 Critical severity

  Front End Users: Unrestricted Upload of File with Dangerous Type

  CVE-2025-2005Apr 2, 2025RustauriusEPSS 21.8%

  The Front End Users plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the file uploads field of the registration form in all versions up to, and including, 3.2.32. This makes it possible for unauthenticated att

• 8.8 High severity

  Front End Users: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-7607Aug 29, 2024Rustaurius

  The Front End Users plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter in all versions up to, and including, 3.2.28 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the exis