Skip to content
Noroxi

WP User Frontend

wp-user-frontend · plugin

Known security vulnerabilities for WP User Frontend. Find out in seconds which version runs on your site with WP Lens.

20 known vulnerabilities

1 with public exploit code · latest Sep 23, 2026

Vulnerabilities

  • CVE-2026-81283

    WordPress WP User Frontend plugin <= 4.3.10 - PHP Object Injection vulnerability

    High 8.8

  • CVE-2026-5127

    User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Authenticated (Subscriber+) PHP Object Injection

    High 8.8

  • CVE-2026-1565

    User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Authenticated (Author+) Arbitrary File Upload

    High 8.8

  • CVE-2026-32485

    WordPress WP User Frontend plugin <= 4.2.8 - Broken Access Control vulnerability

    High 7.5

  • CVE-2024-38693

    WordPress WP User Frontend plugin <= 4.0.7 - SQL Injection vulnerability

    High 7.2

  • CVE-2023-47682

    WordPress WP User Frontend plugin <= 3.6.5 - Authenticated Privilege Escalation vulnerability

    High 7.2

  • CVE-2026-95525

    WordPress WP User Frontend plugin <= 4.3.11 - Arbitrary File Deletion vulnerability

    Medium 6.5

  • CVE-2026-95523

    WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability

    Medium 6.5

  • CVE-2026-57334

    WordPress WP User Frontend plugin <= 4.3.7 - Broken Access Control vulnerability

    Medium 6.5

  • CVE-2026-42412

    WordPress WP User Frontend plugin <= 4.3.1 - Broken Access Control vulnerability

    Medium 6.5

  • CVE-2026-24364

    WordPress WP User Frontend plugin <= 4.2.5 - Broken Access Control vulnerability

    Medium 6.5

  • CVE-2025-58673

    WordPress WP User Frontend Plugin <= 4.1.12 - Content Injection Vulnerability

    Medium 5.4

  • CVE-2025-58672

    WordPress WP User Frontend Plugin <= 4.1.12 - Broken Access Control Vulnerability

    Medium 5.4

  • CVE-2026-95524

    WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability

    Medium 5.3

  • CVE-2026-12418

    User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.7 - Insecure Direct Object Reference to Unauthenticat

    Medium 5.3

  • CVE-2026-12406

    User Frontend <= 4.3.7 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'attach_id' Parameter

    Medium 5.3

  • CVE-2026-5459

    User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Unauthenticated Insecure Direct Object Reference

    Medium 5.3

  • CVE-2026-2233

    User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Missing Authorization to Unauthenticated Arbitrar

    Medium 5.3

  • CVE-2025-14047

    WP User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion

    Medium 5.3

  • CVE-2023-45002

    WordPress WP User Frontend plugin <= 3.6.8 - Broken Access Control vulnerability

    Medium 4.3

← Back to directory