CVE-2025-26877: WordPress Front End Users Plugin <= 3.2.30 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rustaurius Front End Users front-end-only-users allows Stored XSS.This issue affects Front End Users: from n/a through <= 3.2.30.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-26877?
CVE-2025-26877 is a high-severity vulnerability due to its risk of allowing stored cross-site scripting (XSS).
How do I fix CVE-2025-26877?
To fix CVE-2025-26877, update Rustaurius Front End Users and WordPress Front End Users Plugin to version 3.2.31 or later.
Who is affected by CVE-2025-26877?
CVE-2025-26877 affects users of Rustaurius Front End Users and the WordPress Front End Users Plugin up to version 3.2.30.
What type of vulnerability is CVE-2025-26877?
CVE-2025-26877 is classified as a cross-site scripting (XSS) vulnerability, specifically a stored XSS issue.
Can CVE-2025-26877 lead to data theft?
Yes, if exploited, CVE-2025-26877 can lead to data theft by allowing attackers to execute scripts in the context of user sessions.