Description
Unauthenticated Broken Access Control in WP User Frontend <= 4.3.7 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| weDevs | WP User Frontend | ≤ 4.3.7 | — |
Medium · 6.5
CVE-2026-57334
EUVD-2026-40105GHSA-5m7g-c794-p955
WordPress WP User Frontend plugin <= 4.3.7 - Broken Access Control vulnerability
Published Jun 29, 2026 · Updated Jun 29, 2026 · Assigned by Patchstack