What’s Vulnerable › Products

User Frontend vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your User Frontend version is affected

Latest User Frontend vulnerabilities

• CVE-2026-75824 — WP User Frontend 2.5.8 - 4.3.11 - Unauthenticated Account Creation with Registration Disabled (CVSS 5.3)
• CVE-2026-75823 — WP User Frontend 3.5.29 - 4.3.11 - Unauthenticated Privilege Escalation via Registration Role Encryption (CVSS 7.4)
• CVE-2026-17563 — WP User Frontend < 4.3.11 - Unauthenticated Post Creation via Subscription-Gated Form (CVSS 5.3)
• CVE-2026-19116 — WP User Frontend < 4.3.11 - Subscriber+ PHP Object Injection via Frontend Post Edit Form (CVSS 8.8)
• CVE-2026-14567 — WP User Frontend < 4.3.10 - Unauthenticated User Email and Phone Disclosure via User Directory (CVSS 5.3)
• CVE-2026-14558 — WP User Frontend < 4.3.10 - Editor+ PHP Object Injection via AI Form Builder (CVSS 7.2)