Skip to content
OpenAdvisories

Product · wedevs

WP User Frontend

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-52708

    WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerability

    Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Frontend: from n/a through 4.3.13.

    wedevs WP User Frontend
  • Medium 5.3
    CVE-2026-48884

    WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerability

    Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Frontend: from n/a through 4.3.13.

    wedevs WP User Frontend
  • Medium 6.5
    CVE-2026-95525

    WordPress WP User Frontend plugin <= 4.3.11 - Arbitrary File Deletion vulnerability

    Subscriber Arbitrary File Deletion in WP User Frontend <= 4.3.11 versions.

    wedevs WP User Frontend
  • Medium 5.3
    CVE-2026-95524

    WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability

    Unauthenticated Bypass Vulnerability in WP User Frontend <= 4.3.11 versions.

    wedevs WP User Frontend
  • Medium 6.5
    CVE-2026-95523

    WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability

    Subscriber Bypass Vulnerability in WP User Frontend <= 4.3.11 versions.

    wedevs WP User Frontend
  • Medium 6.5
    CVE-2026-57334

    WordPress WP User Frontend plugin <= 4.3.7 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in WP User Frontend <= 4.3.7 versions.

    wedevs WP User Frontend
  • Medium 6.5
    CVE-2026-42412

    WordPress WP User Frontend plugin <= 4.3.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP User Frontend: from n/a through 4.3.1.

    wedevs WP User Frontend
  • Medium 6.5
    CVE-2026-24364

    WordPress WP User Frontend plugin <= 4.2.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Frontend: from n/a through <= 4.2.5.

    wedevs WP User Frontend
  • Medium 5.4
    CVE-2025-58672

    WordPress WP User Frontend Plugin <= 4.1.12 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Frontend: from n/a through <= 4.1.12.

    wedevs WP User Frontend
  • Medium 5.4
    CVE-2025-58673

    WordPress WP User Frontend Plugin <= 4.1.12 - Content Injection Vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in weDevs WP User Frontend wp-user-frontend allows Code Injection.This issue affects WP User Frontend: from n/a through <= 4.1.12.

    wedevs WP User Frontend
  • Medium 4.3
    CVE-2023-45002

    WordPress WP User Frontend plugin <= 3.6.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Frontend: from n/a through 3.6.8.

    wedevs WP User Frontend