Skip to content
OpenAdvisories

Product · Rustaurius

Front End Users

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-62072

    WordPress Front End Users plugin <= 3.2.33 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users.This issue affects Front End Users: from n/a through <= 3.2.33.

    Rustaurius Front End Users
  • Medium 6.5
    CVE-2025-58235

    WordPress Front End Users plugin <= 3.2.35 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rustaurius Front End Users front-end-only-users allows Stored XSS.This issue affects Front End Users: from n/a through <= 3.2.35.

    Rustaurius Front End Users
  • Medium 5.4
    CVE-2025-47580

    WordPress Front End Users plugin <= 3.2.35 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Front End Users: from n/a through <= 3.2.35.

    Rustaurius Front End Users
  • Medium 4.9
    CVE-2024-12410

    Front End Users <= 3.2.32 - Authenticated (Admin+) SQL injection

    The Front End Users plugin for WordPress is vulnerable to SQL Injection via the 'UserSearchField' parameter in all versions up to, and including, 3.2.32 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the exis…

    Rustaurius Front End Users Web / CMS
  • Medium 6.5
    CVE-2025-26877

    WordPress Front End Users Plugin <= 3.2.30 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rustaurius Front End Users front-end-only-users allows Stored XSS.This issue affects Front End Users: from n/a through <= 3.2.30.

    Rustaurius Front End Users
  • Medium 6.4
    CVE-2024-13563

    Front End Users <= 3.2.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via forgot-password Shortcode

    The Front End Users plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's forgot-password shortcode in all versions up to, and including, 3.2.30 due to insufficient input sanitization and output escaping on user supplied attribute…

    Rustaurius Front End Users Web / CMS
  • Medium 6.4
    CVE-2024-7606

    Front End Users <= 3.2.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Front End Users plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'user-search' shortcode in all versions up to, and including, 3.2.28 due to insufficient input sanitization and output escaping on user supplied attributes.…

    Rustaurius Front End Users Web / CMS