Skip to content
OpenAdvisories

Vendor

syammohanm

4 known vulnerabilities.

Products

WPFront User Role Editor 2 WPFront Notification Bar 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-93896

    WPFront Notification Bar <= 3.5.1 - Reflected Cross-Site Scripting via REQUEST_URI

    The WPFront Notification Bar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.5.1. This is due to the debug-log output path (write_debug_logs) reflecting the raw value of $_SERVER['REQUEST_URI'] through …

    syammohanm WPFront Notification Bar Web / CMS
  • Medium 4.3
    CVE-2024-2931

    WPFront User Role Editor <= 3.2.1.11184 - Limited Information Exposure

    The WPFront User Role Editor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.1.11184 via the wpfront_user_role_editor_assign_roles_user_autocomplete AJAX action. This makes it possible for authent…

    syammohanm WPFront User Role Editor Web / CMS
  • Medium 4.4
    CVE-2024-0625

    WPFront Notification Bar <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via wpfront-notification-bar-options[custom_class]

    The WPFront Notification Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpfront-notification-bar-options[custom_class]’ parameter in all versions up to, and including, 3.3.2 due to insufficient input sanitization and output esc…

    syammohanm WPFront Notification Bar Web / CMS