Skip to contentWedevs User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction With Frontend Post Submission vulnerabilities
- wedevs user frontend – membership, user registration, user profile, user directory & content restriction with frontend post submissionUser Frontend <= 4.3.13 - Unauthenticated Stored Cross-Site Scripting via Taxonomy Field Text-InputCVE-2026-1092147.2 High
- wedevs user frontend – membership, user registration, user profile, user directory & content restriction with frontend post submissionUser Frontend <= 4.3.13 - Authenticated (Subscriber+) Privilege Escalation via post_content ParameterCVE-2026-1200708.8 High
- wedevs user frontend – membership, user registration, user profile, user directory & content restriction with frontend post submissionUser Frontend <= 4.3.13 - Reflected Cross-Site Scripting via 'field_attr[required]' ParameterCVE-2026-1039626.1 Medium
- wedevs user frontend – membership, user registration, user profile, user directory & content restriction with frontend post submissionUser Frontend <= 4.3.12 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpuf_payment_method' ParameterCVE-2026-965746.4 Medium