Glowlogix vulnerabilities
4 vulnerabilities
Known vulnerabilities in Glowlogix products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
Products
1- WP Frontend Profile4 vulnerabilities
CVE-2022-49745starpluginseasy_age_verify+1239
EPSS score0.44%
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.CVE-2026-1644glowlogixwp frontend profile+1EPSS score0.16%
The WP Frontend Profile plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.8. This is due to missing nonce validation on the 'update_action' function. This makes it possible for unauthenticated attackers to approve or reject user account registrations via a forged request granted they can trick an administrator into performing an action such as clicking on a link.CVE-2026-39688glowlogixwp frontend profile+1EPSS score0.30%
Missing Authorization vulnerability in Glowlogix WP Frontend Profile wp-front-end-profile allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Frontend Profile: from n/a through <= 1.3.9.CVE-2023-51483glowlogixwp frontend profile+1EPSS score0.54%
Improper Privilege Management vulnerability in Glowlogix WP Frontend Profile allows Privilege Escalation.This issue affects WP Frontend Profile: from n/a through 1.3.1.