Skip to content
OpenAdvisories

Vendor

aharonyan

5 known vulnerabilities.

Products

WP Front User Submit / Front Editor 3 Guest posting / Frontend Posting / Front Editor – WP Front User Submit 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-13419

    Guest posting / Frontend Posting / Front Editor – WP Front User Submit <= 5.0.0 - Missing Authorization to Unauthenticated Media Deletion

    The Guest posting / Frontend Posting / Front Editor – WP Front User Submit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '/wp-json/bfe/v1/revert' REST API endpoint in all versions up to, and i…

    aharonyan Guest posting / Frontend Posting / Front Editor – WP Front User Submit Web / CMS
  • Medium 5.9
    CVE-2025-47617

    WordPress WP Front User Submit / Front Editor plugin <= 5.0.6 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aharonyan WP Front User Submit / Front Editor front-editor allows Stored XSS.This issue affects WP Front User Submit / Front Editor: from n/a through <= 5.0.…

    aharonyan WP Front User Submit / Front Editor
  • Medium 4.4
    CVE-2024-2967

    Guest posting / Frontend Posting wordpress plugin – WP Front User Submit / Front Editor <= 4.4.7 - Authenticated (Admin+) Stored Cross-Site Scripting

    The Guest posting / Frontend Posting wordpress plugin – WP Front User Submit / Front Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form settings in all versions up to, and including, 4.4.7 due to insufficient input sanitization …

    aharonyan Guest posting / Frontend Posting / Front Editor – WP Front User Submit Web / CMS