Front End Users

Front End Users has 14 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; 11 are fixed and 3 remain unpatched as of October 2026. Their average CVSS score is 6.2, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 1 high. 2025 was the busiest year with 8 disclosures.

The most common weakness is Cross-Site Scripting, behind 6 of the records (43%). Other recurring categories include Missing Authorization, SQL Injection.

11 of the records (79%) have a vendor fix, while 3 remain unpatched. The oldest unresolved one dates back to 2025.

10 independent researchers contributed these findings, most of them (2) reported by Peter Thaleikis.

Strategic Overview

Avg CVSSMedium

6.2/ 10

Patch Coverage79%

Open

Fixed

Get automatic notifications for all Front End Users vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-58235

Front End Users <= 3.2.33 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

14 records


2026-10-21 00:00	Front End Users <= 3.2.35 - Missing Authorization Front End Users <= 3.2.35	`CVE-2026-87835`	5.3 Medium	Ahmed Hashim Ismael	No
2025-10-16 00:00	Front End Users <= 3.2.33 - Missing Authorization Front End Users <= 3.2.33	`CVE-2025-62072`	4.3 Medium	Legion Hunter	Yes
2025-09-22 00:00	Front End Users <= 3.2.33 - Authenticated (Contributor+) Stored Cross-Site Scripting Front End Users <= 3.2.33	`CVE-2025-58235`	6.4 Medium	theviper17y	No
2025-05-15 00:00	Front End Users <= 3.2.32 - Missing Authorization to Information Exposure Front End Users <= 3.2.32	`CVE-2025-47580`	5.3 Medium	Kévin Mosbahi (Mika)	No
2025-04-01 20:37	Front-End-Only-Users <= 3.2.32 - Unauthenticated Arbitrary File Upload Front End Users <= 3.2.32	`CVE-2025-2005`	9.8 Critical	hashiramasenju333	Yes
2025-04-01 20:34	Front End Users <= 3.2.32 - Authenticated (Admin+) SQL injection Front End Users <= 3.2.32	`CVE-2024-12410`	4.9 Medium	Colin Xu	Yes
2025-04-01 00:00	Front End Users <= 3.2.32 - Reflected Cross-Site Scripting Front End Users <= 3.2.32	`CVE-2024-13569`	6.1 Medium	Hassan Khan Yusufzai - Splint3r7	Yes
2025-02-22 00:00	Front End Users <= 3.2.30 - Authenticated (Contributor+) Stored Cross-Site Scripting Front End Users <= 3.2.30	`CVE-2025-26877`	6.4 Medium	zaim	Yes
2025-02-14 20:08	Front End Users <= 3.2.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via forgot-password Shortcode Front End Users <= 3.2.30	`CVE-2024-13563`	6.4 Medium	zaim	Yes
2024-08-28 00:00	Front End Users <= 3.2.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Front End Users <= 3.2.28	`CVE-2024-7606`	6.4 Medium	Peter Thaleikis	Yes

Showing 1–10 of 14 reports