Security
فارسی
All products

frontend-dashboard

WordPress · Plugin
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Frontend Dashboard < 3.0.5 and ProfileGrid < 6.0.0.5 - Unauthenticated PHP Object InjectionCVE-2026-103693 frontend-dashboardprofilegrid-user-profiles-groups-and-communities WordPress High Fix reported
Frontend Dashboard <= 3.0.7 - Authenticated (Subscriber+) Privilege EscalationCVE-2026-107424 frontend-dashboard WordPress Medium Fix reported
Frontend Dashboard 3.0.0 - 3.0.4 - Unauthenticated Privilege EscalationCVE-2026-103692 frontend-dashboard WordPress High Fix reported
Frontend Dashboard <= 2.0.0 - Missing AuthorizationCVE-2026-103681 frontend-dashboard WordPress Medium Fix reported
Frontend Dashboard <= 2.2.5 - Unauthenticated SQL InjectionCVE-2025-46248 frontend-dashboard WordPress High Fix reported
Frontend Dashboard <= 2.2.8 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-49310 frontend-dashboard WordPress Medium Fix reported
Frontend Dashboard 1.0 - 2.2.7 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via fed_admin_setting_form_function FunctionCVE-2025-4474 frontend-dashboard WordPress High Fix reported
Frontend Dashboard 1.5.10 - 2.2.7 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via ajax_request FunctionCVE-2025-4473 frontend-dashboard WordPress High Fix reported
Frontend Dashboard 1.0 - 2.2.6 - Missing Authorization to Unauthenticated Privilege Escalation via fed_wp_ajax_fed_login_form_post FunctionCVE-2025-4104 frontend-dashboard WordPress Critical Fix reported
Frontend Dashboard <= 2.2.2 - Sensitive Information ExposureCVE-2024-32726 frontend-dashboard WordPress Medium Fix reported
Frontend Dashboard <= 2.2.4 - Authenticated (Subscriber+) Arbitrary Function CallCVE-2024-8268 frontend-dashboard WordPress High Fix reported
Frontend Dashboard <= 2.2.1 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2024-29775 frontend-dashboard WordPress Medium Fix reported