Description
Subscriber Arbitrary File Deletion in WP User Frontend <= 4.3.11 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| weDevs | WP User Frontend | ≤ 4.3.11 | — |
Medium · 6.5
CVE-2026-95525
EUVD-2026-85494GHSA-mvgj-5x46-v6pp
WordPress WP User Frontend plugin <= 4.3.11 - Arbitrary File Deletion vulnerability
Published Sep 23, 2026 · Updated Sep 23, 2026 · Assigned by Patchstack