Advisories · Technology

aharonyan WP Front User Submit / Front Editor.

Every CVE that names aharonyan WP Front User Submit / Front Editor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-28988 CVE record

CVSS 7.1 High

WordPress WP Front User Submit / Front Editor plugin <= 4.9.3 - Reflected Cross Site Scripting (XSS) vulnerability
- aharonyan WP Front User Submit / Front Editor
- Cross-site scripting (XSS)
Not analysed yet 27 Jun 2025
CVE-2025-52795 CVE record

CVSS 7.1 High

WordPress WP Front User Submit / Front Editor plugin <= 5.0.6 - Cross Site Request Forgery (CSRF) vulnerability
- aharonyan WP Front User Submit / Front Editor
- Cross-site request forgery (CSRF)
Not analysed yet 20 Jun 2025
CVE-2025-47617 CVE record

CVSS 5.9 Medium

WordPress WP Front User Submit / Front Editor plugin <= 5.0.6 - Cross Site Scripting (XSS) vulnerability
- aharonyan WP Front User Submit / Front Editor
- Cross-site scripting (XSS)
Not analysed yet 7 May 2025