Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-57898 EUVD-2025-30724GHSA-jp84-6xxf-454h

WordPress WP Frontend Admin plugin <= 1.22.7 - Cross Site Scripting (XSS) vulnerability

Published Sep 22, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jose Vega WP Frontend Admin display-admin-page-on-frontend allows Stored XSS.This issue affects WP Frontend Admin: from n/a through <= 1.22.7.

Affected products

VendorProductAffectedFixed
Jose Vega WP Frontend Admin ≤ 1.22.7 —

References