Skip to content
OpenAdvisories

Vendor

syammohanm

4 known vulnerabilities.

Products

WPFront User Role Editor 2 WPFront Notification Bar 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2025-3064

    WPFront User Role Editor <= 4.2.1 - Cross-Site Request Forgery to Privilege Escalation via whitelist_options Function

    The WPFront User Role Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.1. This is due to missing or incorrect nonce validation on the whitelist_options() function. This makes it possible for una…

    syammohanm WPFront User Role Editor Web / CMS