Frontend Dashboard

Frontend Dashboard has 8 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 8 are fixed as of September 2026. Their average CVSS score is 7.7, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 4 high. 2025 was the busiest year with 5 disclosures.

The most common weakness is Improper Authorization, behind 3 of the records (38%). Other recurring categories include Cross-Site Scripting, Code Injection.

Every one of the 8 issues recorded for Frontend Dashboard has a vendor fix available, so running the current release closes all known holes.

6 independent researchers contributed these findings, most of them (3) reported by kr0d. Frontend Dashboard is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSHigh

7.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Frontend Dashboard vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2025-4104

Frontend Dashboard 1.0 - 2.2.6 - Missing Authorization to Unauthenticated Privilege Escalation via fed_wp_ajax_fed_login_form_post Function

Read the full analysis

Vulnerability Records

8 records


2025-06-05 00:00	Frontend Dashboard <= 2.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Frontend Dashboard <= 2.2.8	`CVE-2025-49310`	6.4 Medium	Muhammad Yudha - DJ	Yes
2025-05-12 17:50	Frontend Dashboard 1.0 - 2.2.7 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via fed_admin_setting_form_function Function Frontend Dashboard 1.0 – 2.2.7	`CVE-2025-4474`	8.8 High	kr0d	Yes
2025-05-12 17:49	Frontend Dashboard 1.5.10 - 2.2.7 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via ajax_request Function Frontend Dashboard 1.5.10 – 2.2.7	`CVE-2025-4473`	8.8 High	kr0d	Yes
2025-05-06 20:38	Frontend Dashboard 1.0 - 2.2.6 - Missing Authorization to Unauthenticated Privilege Escalation via fed_wp_ajax_fed_login_form_post Function Frontend Dashboard 1.0 – 2.2.6	`CVE-2025-4104`	9.8 Critical	kr0d	Yes
2025-04-22 00:00	Frontend Dashboard <= 2.2.5 - Unauthenticated SQL Injection Frontend Dashboard <= 2.2.5	`CVE-2025-46248`	7.5 High	Nguyen Ngoc Quang Bach (maysbachs)	Yes
2024-09-09 00:00	Frontend Dashboard <= 2.2.4 - Authenticated (Subscriber+) Arbitrary Function Call Frontend Dashboard <= 2.2.4	`CVE-2024-8268`	8.8 High	Lucio Sá	Yes
2024-04-22 00:00	Frontend Dashboard <= 2.2.2 - Sensitive Information Exposure Frontend Dashboard <= 2.2.2	`CVE-2024-32726`	5.3 Medium	Emili Castells	Yes
2024-03-25 00:00	Frontend Dashboard <= 2.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting Frontend Dashboard <= 2.2.1	`CVE-2024-29775`	6.4 Medium	CatFather	Yes

Showing 1–8 of 8 reports

Latestv2.2.11

Frontend Dashboard

Author

M A Vinoth Kumar

4.9(134)

98/100

Last Updated

2026-08-12 (1mo ago)

Active Installs

500+

Downloads

147,161

Requires WP

5.8.3+

Requires PHP

Tested up to

WP 7.0.4

Created

2017-08-09 (9y ago)

Frontend Dashboard Designed and Developed with WordPress Coding Standards Frontend Dashboard is bundled with the huge list of custom features which can easily customise the User profile, Posts, Login, Register, Custom roles on the custom front page. Custom Login Page. Custom Register Page. Custom Forgot Password. Custom Redirect URL for before and after Login, Register, Logout. Restrict WP Admin area for role based users. Add/Delete custom User Roles. Customise the Frontend Dashboard with your theme matching colors. Enable/Disable the Frontend Dashboard scripts and styles on both frontend and admin. Add Frontend Dashboard menus for User based roles. Add any number of custom user field. Add any number of post/custom post field. Each custom fields can be configured based on user roles. Allow/Disallow to upload files in Frontend Dashboard based on User Role. Show custom user fields on Register page. Add/Edit/Delete Post/Custom post in Frontend Dashboard based on User Role. Show user role based custom profile page. Manage custom Post type and Taxonomies. Customize templates. Restrict illegal username on Registration. Frontend Dashboard Plugins List Frontend Dashboard User Management (Pro) Frontend Dashboard Social Connect (Pro) Frontend Dashboard Pages Frontend Dashboard Extra Frontend Dashboard Captcha Frontend Dashboard Templates Frontend Dashboard Social Chat Frontend Dashboard Notification Frontend Dashboard Custom Post and Taxonomies Videos How to Setup Frontend Dashboard and its Add-on For more video : Frontend Dashboard How to setup Membership and Payment (PRO) How to show custom post field in Frontend Post How to Translate Frontend Dashboard How to create custom login for Frontend Dashboard How to create Dashboard for Frontend Dashboard How to set Redirect on Login for Frontend Dashboard How to set Widget for Frontend Dashboard How to Create Custom User Role in Frontend Dashboard How to create a page for Users, based on their User Role How new user can select user role on registration How to customise the layout colours in Frontend Dashboard How to manage post options in Frontend Dashboard How to create custom menu in Frontend Dashboard For more video : Frontend Dashboard

View on WordPress.org