CyberSecBulletin

Vinoth06 vulnerabilities

We track 6 vulnerabilities in Vinoth06 products across 2 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on December 5, 2025.

6vulnerabilities
1critical
5high
0exploited
8.8average CVSS score

Latest Vinoth06 vulnerabilities

  • 8.8 High severity

    User Generator and Importer: Cross-Site Request Forgery

    CVE-2025-12879Vinoth06

    The User Generator and Importer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.2.2. This is due to missing nonce validation in the "Import Using CSV File" function. This makes it possible for unauthenticated

  • 8.8 High severity

    Frontend Dashboard: Improper Authorization

    CVE-2025-4474Vinoth06

    The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the fed_admin_setting_form_function() function in versions 1.0 to 2.2.7. This makes it possible for authenticated attackers, with Subscriber-

  • 8.8 High severity

    Frontend Dashboard: Improper Authorization

    CVE-2025-4473Vinoth06

    The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ajax_request() function in versions 1.0 to 2.2.7. This makes it possible for authenticated attackers, with Subscriber-level access and ab

  • 9.8 Critical severity

    Frontend Dashboard: Improper Authorization

    CVE-2025-4104Vinoth06

    The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the fed_wp_ajax_fed_login_form_post() function in versions 1.0 to 2.2.6. This makes it possible for unauthenticated attackers to reset the ad

  • 8.8 High severity

    Frontend Dashboard: Improper Control of Generation of Code

    CVE-2024-8268Vinoth06

    The Frontend Dashboard plugin for WordPress is vulnerable to unauthorized code execution due to insufficient filtering on callable methods/functions via the ajax_request() function in all versions up to, and including, 2.2.4. This makes it possible for authent

  • 7.5 High severity

    Frontend Dashboard: Exposure of Sensitive Information to an Unauthorized Actor

    CVE-2024-32726Vinoth06

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in vinoth06. Frontend Dashboard.This issue affects Frontend Dashboard: from n/a through 2.2.2.