Rustaurius Front End Users vulnerabilities

• rustaurius front end users Front End Users <= 3.2.35 - Unauthenticated Membership Level and Account Status Self-Assignment CVE-2026-87835 6.5 MediumOctober 24, 2026
• rustaurius front end users WordPress Front End Users plugin <= 3.2.33 - Broken Access Control vulnerability CVE-2025-62072 4.3 MediumOctober 22, 2025
• rustaurius front end users WordPress Front End Users plugin <= 3.2.35 - Cross Site Scripting (XSS) vulnerability CVE-2025-58235 6.5 MediumSeptember 22, 2025
• etoilewebdesign front end users WordPress Front End Users plugin <= 3.2.35 - Broken Access Control vulnerability CVE-2025-47580 5.4 MediumMay 15, 2025
• etoilewebdesign front end users Front End Users <= 3.2.32 - Reflected XSS CVE-2024-13569 7.1 HighApril 22, 2025
• etoilewebdesign front end users Front End Users <= 3.2.32 - Authenticated (Admin+) SQL injection CVE-2024-12410 4.9 MediumApril 2, 2025
• etoilewebdesign front end users Front-End-Only-Users <= 3.2.32 - Unauthenticated Arbitrary File Upload CVE-2025-2005 Public exploit EPSS 21.8% 9.8 CriticalApril 2, 2025
• etoilewebdesign front end users WordPress Front End Users Plugin <= 3.2.30 - Cross Site Scripting (XSS) vulnerability CVE-2025-26877 6.5 MediumFebruary 25, 2025
• etoilewebdesign front end users Front End Users <= 3.2.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via forgot-password Shortcode CVE-2024-13563 6.4 MediumFebruary 15, 2025
• etoilewebdesign front end users Front End Users <= 3.2.28 - Authenticated (Contributor+) Time-Based SQL Injection CVE-2024-7607 8.8 HighAugust 29, 2024
• etoilewebdesign front end users Front End Users <= 3.2.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-7606 6.4 MediumAugust 29, 2024
• etoile web design front end users WordPress Front End Users plugin < 3.2.25 - Cross Site Scripting (XSS) vulnerability CVE-2023-33322 7.1 HighMarch 26, 2024
• etoile web design front end users WordPress Front End Users Plugin <= 3.2.24 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-34005 6.5 MediumJuly 17, 2023