Frontend Dashboard, CVE-2025-4104
- CVE, Research URL
- Home page URL
- Application
- Published on
- May 07, 2025
- Research Description
- The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the fed_wp_ajax_fed_login_form_post() function in versions 1.0 to 2.2.6. This makes it possible for unauthenticated attackers to reset the administrator’s email and password, and elevate their privileges to that of an administrator.
- Affected versions
-
Min 1.0, max 2.2.7.
- Status
-
vulnerable
| Previous vulnerability researches |
|---|
| Music Sheet Viewer (CVE-2025-25155) , Feb 09, 2025 |
| Music Sheet Viewer (CVE-2024-13671) , May 07, 2025 |
| Music Sheet Viewer (CVE-2024-13670) , Feb 01, 2025 |