CVE-2026-109214

The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ' default: 'category'' parameter in all versions up to, and including, 4.3.13 due to...

CVE-2026-109214

The User Frontend WordPress plugin (versions up to and including 4.3.13 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping within the **ataxonomy_field_name (default: 'category')** parameter. This allows unauthenticated att...

CVE-2026-109214 User Frontend <= 4.3.13 - Unauthenticated Stored Cross-Site Scripting via Taxonomy Field Text-Input

The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ' default: 'category'' parameter in all versions up to, and including, 4.3.13 due to...

EUVD-2026-119162

The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ' default: 'category'' parameter in all versions up to, and including, 4.3.13 due to...