User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission

Güvenlik açıkları

• CVE-2026-81283abone+≤ 4.3.10

  WordPress WP User Frontend plugin <= 4.3.10 - PHP Object Injection vulnerability

  Yüksek 8.8

• CVE-2026-5127abone+≤ 4.3.1

  User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Authenticated (Subscriber+) PHP Object Injection

  Yüksek 8.8

• CVE-2026-1565yazar+≤ 4.2.8

  User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Authenticated (Author+) Arbitrary File Upload

  Yüksek 8.8

• CVE-2026-32485kimlik doğrulamasız≤ <= 4.2.8

  WordPress WP User Frontend plugin <= 4.2.8 - Broken Access Control vulnerability

  Yüksek 7.5

• CVE-2024-38693yüksek yetki≤ 4.0.7

  WordPress WP User Frontend plugin <= 4.0.7 - SQL Injection vulnerability

  Yüksek 7.2

• CVE-2023-47682yüksek yetki≤ 3.6.5

  WordPress WP User Frontend plugin <= 3.6.5 - Authenticated Privilege Escalation vulnerability

  Yüksek 7.2

• CVE-2026-57334kimlik doğrulamasız≤ 4.3.7

  WordPress WP User Frontend plugin <= 4.3.7 - Broken Access Control vulnerability

  Orta 6.5

• CVE-2026-42412kimlik doğrulamasız≤ 4.3.1

  WordPress WP User Frontend plugin <= 4.3.1 - Broken Access Control vulnerability

  Orta 6.5

• CVE-2026-95525abone+≤ 4.3.11

  WordPress WP User Frontend plugin <= 4.3.11 - Arbitrary File Deletion vulnerability

  Orta 6.5

• CVE-2026-95523giriş gerekir≤ 4.3.11

  WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability

  Orta 6.5

• CVE-2026-24364giriş gerekir≤ 4.2.5

  WordPress WP User Frontend plugin <= 4.2.5 - Broken Access Control vulnerability

  Orta 6.5

• CVE-2025-58673giriş gerekir≤ 4.1.12

  WordPress WP User Frontend Plugin <= 4.1.12 - Content Injection Vulnerability

  Orta 5.4

• CVE-2025-58672giriş gerekir≤ 4.1.12

  WordPress WP User Frontend Plugin <= 4.1.12 - Broken Access Control Vulnerability

  Orta 5.4

• CVE-2026-95524kimlik doğrulamasız≤ 4.3.11

  WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability

  Orta 5.3

• CVE-2026-12418kimlik doğrulamasız≤ 4.3.7

  User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.7 - Insecure Direct Object Reference to Unauthenticat

  Orta 5.3

• CVE-2026-12406kimlik doğrulamasız≤ 4.3.7

  User Frontend <= 4.3.7 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'attach_id' Parameter

  Orta 5.3

• CVE-2026-5459kimlik doğrulamasız≤ 4.3.1

  User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Unauthenticated Insecure Direct Object Reference

  Orta 5.3

• CVE-2026-2233kimlik doğrulamasız≤ 4.2.8

  User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Missing Authorization to Unauthenticated Arbitrar

  Orta 5.3

• CVE-2025-14047kimlik doğrulamasız≤ 4.2.4

  WP User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion

  Orta 5.3

• CVE-2023-45002giriş gerekir≤ 3.6.8

  WordPress WP User Frontend plugin <= 3.6.8 - Broken Access Control vulnerability

  Orta 4.3