WP Frontend Profile

Vulnerabilities 14Slug wp-front-end-profileLatest version 1.3.9WordPress.org →

Minimum safe version

1.3.9

Update to 1.3.9 or later to address 12 fixable vulnerabilities

Latest available1.3.9 ✓Affected up to1.2.5 ⚠⚠ 1 vulnerability has no fix
N/A
2026-03-06< 1.3.9

WP Frontend Profile <= 1.3.8 - Cross-Site Request Forgery to Unauthorized User Account Approval or Rejection

WordfenceCVE
Medium 6.3
2024-10-16< 1.2.6

Freemius SDK <= 2.4.2 - Missing Authorization Checks

CVE
Critical 9.8
2024-12-27< 1.3.2

WordPress WP Frontend Profile Plugin <= 1.3.1 is vulnerable to Privilege Escalation

PatchstackCVEWordfenceWPScan
N/A
< 1.2.2

WP Frontend Profile &lt; 1.2.2 - CSRF Check Incorrectly Implemented

WPScan
N/A
2023-07-18< 1.3.1

WordPress WP Frontend Profile Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

PatchstackWPScanCVE
N/A
2020-05-19< 1.2.2

WP Frontend Profile <= 1.2.1 - Cross-Site Request Forgery

Wordfence
N/A
2022-03-04< 1.2.5

Freemius SDK <= 2.4.2 - Missing Authorization Checks

Wordfence
N/A
2016-09-14< 0.2.2

WordPress Front End Profile Plugin <= 0.2.1 - Multiple Vulnerabilities

Patchstack
N/A
2020-05-19< 1.2.2

WordPress WP Frontend Profile plugin <= 1.2.1 - Nonce Security Issue vulnerability

Patchstack
N/A
2022-02-28< 1.2.6

WordPress WP Frontend Profile plugin <= 1.2.5 - Sensitive Information Disclosure vulnerability

Patchstack
N/A
2022-02-28≤ 1.2.5

WordPress WP Frontend Profile plugin <= 1.2.5 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Patchstack