Skip to content
OpenAdvisories
High · 7.5 CVE-2026-32485 EUVD-2026-15829GHSA-x8fc-w2q6-x22j

WordPress WP User Frontend plugin <= 4.2.8 - Broken Access Control vulnerability

Published Mar 25, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Frontend: from n/a through <= 4.2.8.

Affected products

VendorProductAffectedFixed
weDevs WP User Frontend ≤ <= 4.2.8 —

References