Skip to content
OpenAdvisories

Archive

2 April 2025

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-2005 Public exploit EPSS 22%

    Front-End-Only-Users <= 3.2.32 - Unauthenticated Arbitrary File Upload

    The Front End Users plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the file uploads field of the registration form in all versions up to, and including, 3.2.32. This makes it possible for unauthenticated at…