Skip to content
OpenAdvisories

Vendor

glowlogix

3 known vulnerabilities.

Products

WP Frontend Profile 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-39688

    WordPress WP Frontend Profile plugin <= 1.3.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Glowlogix WP Frontend Profile wp-front-end-profile allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Frontend Profile: from n/a through <= 1.3.9.

    glowlogix WP Frontend Profile
  • Medium 4.3
    CVE-2026-1644

    WP Frontend Profile <= 1.3.8 - Cross-Site Request Forgery to Unauthorized User Account Approval or Rejection

    The WP Frontend Profile plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.8. This is due to missing nonce validation on the 'update_action' function. This makes it possible for unauthenticated attackers…

    glowlogix WP Frontend Profile Web / CMS