Front End Users

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:front_end_users:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductFront End Users (cb8307d9-0407-5e43-999e-e373a61ac039)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-87835 vulnerable 2026-11-03 10:16:08.758178 Front End Users <= 3.2.35 - Unauthenticated Membership Level and Account Status Self-Assignment
The Front End Users WordPress plugin through 3.2.35 does not restrict which account attributes a visitor may set when registering through its front-end forms, allowing unauthenticated users to assign themselves an arbitrary membership level and to mark their own account as approved, confirmed and paid, bypassing the Front End Users WordPress plugin through 3.2.35's content restrictions and its registration gating.
Published: 2026-10-24T06:00:17.748Z
Updated: 2026-10-24T14:36:55.413Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13569 vulnerable 2026-06-08 06:25:37.968543 Front End Users <= 3.2.32 - Reflected XSS
The Front End Users WordPress plugin through 3.2.32 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
Published: 2025-04-22T06:00:02.142Z
Updated: 2025-04-22T14:41:36.575Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.