Advisories · Technology
Glowlogix WP Frontend Profile.
Every CVE that names Glowlogix WP Frontend Profile among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
WordPress WP Frontend Profile plugin <= 1.3.9 - Broken Access Control vulnerability
- Glowlogix WP Frontend Profile
- Broken access control
- CVSS 4.3 Medium
WP Frontend Profile <= 1.3.8 - Cross-Site Request Forgery to Unauthorized User Account Approval or Rejection
- glowlogix WP Frontend Profile
- Cross-site request forgery (CSRF)
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress WP Frontend Profile plugin <= 1.3.1 - Unauthenticated Privilege Escalation vulnerability
- Glowlogix WP Frontend Profile
- Privilege escalation