What’s Vulnerable › Products
weDevs WP User Frontend vulnerabilities
18 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.
Check whether your weDevs WP User Frontend version is affected
Latest weDevs WP User Frontend vulnerabilities
- CVE-2026-52708 — WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerability (CVSS 4.3)
- CVE-2026-48884 — WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerability (CVSS 5.3)
- CVE-2026-79618 — WP User Frontend < 4.3.12 - Subscriber+ Post Creation via Subscription-Gated Form (CVSS 4.3)
- CVE-2026-95525 — WordPress WP User Frontend plugin <= 4.3.11 - Arbitrary File Deletion vulnerability (CVSS 6.5)
- CVE-2026-95524 — WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability (CVSS 5.3)
- CVE-2026-95523 — WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability (CVSS 6.5)
- CVE-2026-81283 — WordPress WP User Frontend plugin <= 4.3.10 - PHP Object Injection vulnerability (CVSS 8.8)
- CVE-2026-57334 — WordPress WP User Frontend plugin <= 4.3.7 - Broken Access Control vulnerability (CVSS 6.5)
- CVE-2026-42412 — WordPress WP User Frontend plugin <= 4.3.1 - Broken Access Control vulnerability (CVSS 6.5)
- CVE-2026-32485 — WordPress WP User Frontend plugin <= 4.2.8 - Broken Access Control vulnerability (CVSS 7.5)
- CVE-2026-24364 — WordPress WP User Frontend plugin <= 4.2.5 - Broken Access Control vulnerability (CVSS 6.5)
- CVE-2025-58673 — WordPress WP User Frontend Plugin <= 4.1.12 - Content Injection Vulnerability (CVSS 5.4)
- CVE-2025-58672 — WordPress WP User Frontend Plugin <= 4.1.12 - Broken Access Control Vulnerability (CVSS 5.4)
- CVE-2023-45002 — WordPress WP User Frontend plugin <= 3.6.8 - Broken Access Control vulnerability (CVSS 4.3)
- CVE-2024-38693 — WordPress WP User Frontend plugin <= 4.0.7 - SQL Injection vulnerability (CVSS 7.2)
- CVE-2023-47682 — WordPress WP User Frontend plugin <= 3.6.5 - Authenticated Privilege Escalation vulnerability (CVSS 7.2)
- CVE-2021-24649 — WP User Frontend < 3.5.29 - Obscure Registration as Admin (CVSS 9.8)
- CVE-2021-25076 — WP User Frontend < 3.5.26 - SQL Injection to Reflected Cross-Site Scripting (CVSS 8.8)