CVE-2025-2005 Front End Users Unauthenticated File Upload

CVE-2025-2005 is a critical-severity vulnerability. AttackerView checks WordPress sites for it with a live exploit check.

Is my site vulnerable to CVE-2025-2005?

Detects the Front End Users WordPress plugin at version 3.2.32 or earlier, where the registration form file upload field lacks file type validation. An unauthenticated attacker can upload a PHP webshell through the registration form, which is stored in a predictable uploads directory, enabling remote code execution.