Skip to content
Unknown User Frontend vulnerabilities
-
unknown user frontend
WP User Frontend < 4.3.14 - Reflected XSS via 'field_attr' Parameter
CVE-2026-115277
4.7 Medium
-
unknown wp user frontend
WP User Frontend < 4.3.12 - Subscriber+ Post Creation via Subscription-Gated Form
CVE-2026-79618
4.3 Medium
-
unknown user frontend
WP User Frontend 2.5.8 - 4.3.11 - Unauthenticated Account Creation with Registration Disabled
CVE-2026-75824
5.3 Medium
-
unknown user frontend
WP User Frontend 3.5.29 - 4.3.11 - Unauthenticated Privilege Escalation via Registration Role Encryption
CVE-2026-75823
7.4 High
-
unknown user frontend
WP User Frontend < 4.3.11 - Unauthenticated Post Creation via Subscription-Gated Form
CVE-2026-17563
5.3 Medium
-
unknown user frontend
WP User Frontend < 4.3.11 - Subscriber+ PHP Object Injection via Frontend Post Edit Form
CVE-2026-19116
8.8 High
-
unknown user frontend
WP User Frontend < 4.3.10 - Unauthenticated User Email and Phone Disclosure via User Directory
CVE-2026-14567
5.3 Medium
-
unknown user frontend
WP User Frontend < 4.3.10 - Editor+ PHP Object Injection via AI Form Builder
CVE-2026-14558
7.2 High
-
unknown user frontend: ai powered frontend post submission, user directory, user profile, membership & user registration
WP User Frontend < 4.3.8 - Unauthenticated Author-less Attachment Deletion
CVE-2026-14568
6.5 Medium
-
unknown wp user frontend
WP User Frontend < 3.5.29 - Obscure Registration as Admin
CVE-2021-24649
9.8 Critical
-
wedevs wp user frontend, unknown wp user frontend – membership, profile, registration & post submission plugin for wordpress +1 more
WP User Frontend < 3.5.26 - SQL Injection to Reflected Cross-Site Scripting
CVE-2021-25076
Public exploit
EPSS 17.3%
8.8 High