Wpfront

Wpfront User Role Editor

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2024-2931

  • EPSS 0.27%
  • Published 02.04.2024 09:15:07
  • Last modified 27.08.2025 21:15:45

The WPFront User Role Editor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.1.11184 via the wpfront_user_role_editor_assign_roles_user_autocomplete AJAX action. This makes it possible fo...

6.1

CVE-2021-24984

Exploit
  • EPSS 0.21%
  • Published 27.12.2021 11:15:09
  • Last modified 21.11.2024 05:54:08

The WPFront User Role Editor WordPress plugin before 3.2.1.11184 does not sanitise and escape the changes-saved parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting