What’s Vulnerable › Products

rustaurius Front End Users vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your rustaurius Front End Users version is affected

Latest rustaurius Front End Users vulnerabilities

• CVE-2026-87835 — Front End Users <= 3.2.35 - Unauthenticated Membership Level and Account Status Self-Assignment (CVSS 6.5)
• CVE-2025-62072 — WordPress Front End Users plugin <= 3.2.33 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2025-58235 — WordPress Front End Users plugin <= 3.2.35 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2025-47580 — WordPress Front End Users plugin <= 3.2.35 - Broken Access Control vulnerability (CVSS 9.8)
• CVE-2024-13569 — Front End Users <= 3.2.32 - Reflected XSS (CVSS 7.1)
• CVE-2025-2005 — Front-End-Only-Users <= 3.2.32 - Unauthenticated Arbitrary File Upload (CVSS 9.8)
• CVE-2024-12410 — Front End Users <= 3.2.32 - Authenticated (Admin+) SQL injection (CVSS 4.9)
• CVE-2025-26877 — WordPress Front End Users Plugin <= 3.2.30 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-13563 — Front End Users <= 3.2.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via forgot-password Shortcode (CVSS 5.4)
• CVE-2024-7607 — Front End Users <= 3.2.28 - Authenticated (Contributor+) Time-Based SQL Injection (CVSS 8.8)
• CVE-2024-7606 — Front End Users <= 3.2.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 5.4)
• CVE-2023-33322 — WordPress Front End Users plugin < 3.2.25 - Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
• CVE-2023-34005 — WordPress Front End Users Plugin <= 3.2.24 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)