Unknown Guest Posting / Frontend Posting / Front Editor vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown Guest Posting / Frontend Posting / Front Editor, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.7CVE-2025-12569unknownguest posting / frontend posting / front editor+1
EPSS score
0.20%
The Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.0 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue5.9CVE-2026-1867unknownguest posting / frontend posting / front editor+1
EPSS score
0.22%
The Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6 allows passing a URL parameter to regenerate a .json file based on demo data that it initially creates. If an administrator modifies the demo form and enables admin notifications in the Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6's settings, it is possible for an unauthenticated attacker to export and download all of the form data/settings, including the administrator's email address.