WP Frontend Profile

This information is sourced from wpvulnerabilities.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Vulnerabilities

  • Access violation vulnerability in WP Frontend Profile 1.3.1

    Fixed

    The WP Frontend Profile plugin is a plugin for WordPress websites that has a security flaw in all its versions up until 1.3.1. This means that someone without authorization could take control of any ...

    Read More
  • Input validation vulnerability in Freemius SDK 2.5.9 (1072 components affected)

    Fixed

    The Freemius SDK for WordPress is vulnerable to an attack known as Reflected Cross-Site Scripting. This attack is possible because of insufficient security measures in versions of the Freemius SDK up ...

    Read More
  • Input validation vulnerability in WP Frontend Profile 1.2.1

    Fixed

    The WP Frontend Profile plugin for WordPress versions up to and including 1.2.1 is vulnerable to Cross-Site Request Forgery. This is because the 'wp-frontend-profile/functions/save-fields.php' file h...

    Read More
  • Access violation vulnerability in WP Frontend Profile 0.2.1

    Fixed

    The WP Front End Profile plugin for WordPress could be exploited to gain access to an account with full administrative privileges

    Read More
  • Input validation vulnerability in WP Frontend Profile 0.2.1

    Fixed

    The WP Front End Profile plugin for WordPress is not secure in versions up to 0.2.1. This plugin allows attackers to put malicious code into pages on the website. This code will run when a user visits...

    Read More
  • Access violation vulnerability in Freemius SDK (620 components affected)

    Fixed

    Freemius, a software development kit used by hundreds of WordPress plugin and theme developers, had a security vulnerability in its older versions (up to and including 2.4.2). This vulnerability could...

    Read More