Skip to content
OpenAdvisories

Product · wedevs

WP User Frontend

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2026-81283

    WordPress WP User Frontend plugin <= 4.3.10 - PHP Object Injection vulnerability

    Subscriber PHP Object Injection in WP User Frontend <= 4.3.10 versions.

    wedevs WP User Frontend
  • High 7.5
    CVE-2026-32485

    WordPress WP User Frontend plugin <= 4.2.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Frontend: from n/a through <= 4.2.8.

    wedevs WP User Frontend
  • High 7.6
    CVE-2024-38693

    WordPress WP User Frontend plugin <= 4.0.7 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP User Frontend allows SQL Injection.This issue affects WP User Frontend: from n/a through 4.0.7.

    wedevs WP User Frontend
  • High 7.2
    CVE-2023-47682

    WordPress WP User Frontend plugin <= 3.6.5 - Authenticated Privilege Escalation vulnerability

    Improper Privilege Management vulnerability in weDevs WP User Frontend allows Privilege Escalation.This issue affects WP User Frontend: from n/a through 3.6.5.

    wedevs WP User Frontend