CVE-2026-75823

The User Frontend WordPress plugin (versions before 4.3.12 ) is vulnerable to unauthenticated privilege escalation . The root cause is the failure to prevent tampering with the role assigned via its registration form, specifically when running on a PHP build where the sodium extension is unavaila...