Etoile Web Design Front End Users

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

10CVEs

Front-End-Only-Users <= 3.2.32 - Unauthenticated Arbitrary File Upload

Published 2025-04-02 · Modified

9.8EPSS 0.220

WordPress Front End Users plugin <= 3.2.35 - Broken Access Control vulnerability

Published 2025-05-15 · Modified

9.8EPSS 0.003

Front End Users <= 3.2.28 - Authenticated (Contributor+) Time-Based SQL Injection

Published 2024-08-29 · Analyzed

8.8EPSS 0.005

WordPress Front End Users Plugin <= 3.2.24 is vulnerable to Cross Site Request Forgery (CSRF)

Published 2023-07-17 · Modified

8.8EPSS 0.003

Front End Users <= 3.2.32 - Reflected XSS

Published 2025-04-22 · Analyzed

7.1EPSS 0.005

WordPress Front End Users plugin < 3.2.25 - Cross Site Scripting (XSS) vulnerability

Published 2024-03-26 · Modified

7.1EPSS 0.004

WordPress Front End Users Plugin <= 3.2.30 - Cross Site Scripting (XSS) vulnerability

Published 2025-02-25 · Modified

6.5EPSS 0.003

Front End Users <= 3.2.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Published 2024-08-29 · Analyzed

6.4EPSS 0.003

Front End Users <= 3.2.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via forgot-password Shortcode

Published 2025-02-15 · Analyzed

6.4EPSS 0.003

Front End Users <= 3.2.32 - Authenticated (Admin+) SQL injection

Published 2025-04-02 · Modified

4.9EPSS 0.004