Advisories · Technology
Frontend Dashboard.
Every CVE that names Frontend Dashboard among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.0 CriticalCritical · CVSS 9+
Frontend Dashboard < 3.0.5 and ProfileGrid < 6.0.0.5 - Unauthenticated PHP Object Injection
- Frontend Dashboard
- ProfileGrid
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
Frontend Dashboard 3.0.0 - 3.0.4 - Unauthenticated Privilege Escalation via Arbitrary Function Call
- Frontend Dashboard
- Privilege escalation
- CVSS 4.3 Medium
Frontend Dashboard < 3.0.0 - Subscriber+ Profile and Post Field Deletion via fed_user_profile_delete
- Frontend Dashboard
- Broken access control