plugin

Frontier Post Vulnerabilities

5 known security issues reported for the Frontier Post WordPress plugin. Most recent disclosed Nov 30, 2023.

1 medium

Running Frontier Post on your site? Check whether your installed version is affected.

Scan your site free

Frontier Post [frontier-post] <= 6.1 (unfixed + closed)

unknown

[en] Cross-Site Request Forgery (CSRF) vulnerability in finnj Frontier Post allows Cross Site Request Forgery.This issue affects Frontier Post: from n/a through 6.1.

Affected:
up to 6.1
Fix:
No patched version reported
Disclosed:
Nov 30, 2023

CVE-2023-6137 on NVD →

Frontier Post <= 6.1 - Cross-Site Request Forgery

medium

The Frontier Post plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.1. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to perform an unauthorized action via a forged request granted they...

CVSS:
4.3
Affected:
up to 6.1
Fix:
No patched version reported
Disclosed:
Nov 23, 2023

CVE-2023-6137 on NVD →

Frontier Post [frontier-post] < 1.1 (closed)

unknown

Update this plugin. An unknown person discovered and reported this Bypass Vulnerability vulnerability in WordPress Frontier Post Plugin. A bypass vulnerability could allow a malicious actor to bypass certain restrictions in the code. This vulnerability has been fixed in version 1.1.

Affected:
up to 1.1
Fixed in:
1.1
Disclosed:
May 15, 2023

Frontier Post [frontier-post] < 1.1 (closed)

unknown

This plugin is prone to a publishing posts security bypass vulnerability. Update this plugin.

Affected:
up to 1.1
Fixed in:
1.1
Disclosed:
May 15, 2015

Frontier Post [frontier-post] < 1.3.3 (closed)

unknown

The Frontier Post WordPress plugin was affected by a Publishing Posts Security Bypass security vulnerability.

Affected:
up to 1.3.3
Fixed in:
1.3.3

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database