User Frontend (Unknown) - vulnerabilities (CVEs)

6 CVEs, 2 in the last 30 days, 1 known versions, newest CVE from 2026-09-30. Vendor: Unknown.

CVEs of User Frontend

• CVE-2026-75824 - CVSS 5.3 (medium), 2026-09-30: The User Frontend WordPress plugin before 4.3.12 does not check whether the site allows user registration before creating an account, allowing unauthenticated…
• CVE-2026-75823 - CVSS 7.4 (high), 2026-09-30: The User Frontend WordPress plugin before 4.3.12 does not prevent tampering with the role assigned by its registration form, allowing unauthenticated users to…
• CVE-2026-17563 - CVSS 5.3 (medium), 2026-09-02: The User Frontend WordPress plugin before 4.3.11 does not enforce its subscription-purchase requirement when processing frontend post submissions, only when…
• CVE-2026-19116 - CVSS 8.8 (high), 2026-09-02: The User Frontend WordPress plugin before 4.3.11 does not prevent user-supplied field values from being deserialized when a submitted post is reopened in its…
• CVE-2026-14567 - CVSS 5.3 (medium), 2026-08-28: The User Frontend WordPress plugin before 4.3.10 does not restrict access to its user directory search endpoint, allowing unauthenticated attackers to…
• CVE-2026-14558 - CVSS 7.2 (high), 2026-08-28: The User Frontend WordPress plugin before 4.3.10 does not properly validate field type definitions and deserialises user-controlled post metadata when…