146 matches found
WordPress User Frontend plugin < 4.3.14 - Reflected XSS vulnerability
Reflected XSS vulnerability discovered by Jasper Weijts in WordPress Plugin WP User Frontend versions 4.3.14...
CVE-2025-3054-Exploit
CVE-2025-3054 Exploit: Download here Details CVE ID : CVE-2025-3054 Published : June 5, 2025 CVSS : 8.8 Patch Available: No official patch yet Impact The WP User Frontend Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadfiles functi...
CVE-2026-115277 WP User Frontend < 4.3.14 - Reflected XSS via 'field_attr' Parameter
The User Frontend WordPress plugin before 4.3.14 does not sanitise and escape some user-supplied values before reflecting them into HTML attributes in a publicly reachable AJAX response, leading to Reflected Cross-Site Scripting. The affected action is gated by an anonymous nonce that only...
CVE-2026-115277 WP User Frontend < 4.3.14 - Reflected XSS via 'field_attr' Parameter
The User Frontend WordPress plugin before 4.3.14 does not sanitise and escape some user-supplied values before reflecting them into HTML attributes in a publicly reachable AJAX response, leading to Reflected Cross-Site Scripting. The affected action is gated by an anonymous nonce that only...
CVE-2026-115277
The User Frontend WordPress plugin (versions before 4.3.14 ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape certain user-supplied values before they are reflected into HTML attributes within a publicly reachable AJAX response ...
CVE-2021-25076
CVE-2021-25076-Exploit Wordpress Plugin WP User Frontend 3.5.26 - SQL-Injection Authenticated CVE description: The WP User Frontend WordPress plugin before 3.5.26 does not validate and escape the status parameter before using it in a SQL statement in the Subscribers dashboard, leading to an SQL...
CVE-2026-52708
Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Frontend: from n/a through 4.3.13...
CVE-2026-48884
Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Frontend: from n/a through 4.3.13...
CVE-2026-52708 WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerability
Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Frontend: from n/a through 4.3.13...
CVE-2026-52708
The weDevs WP User Frontend plugin (versions
EUVD-2026-112862
Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Frontend: from n/a through 4.3.13...
WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by elba.code in WordPress Plugin WP User Frontend versions = 4.3.13...
CVE-2026-48884 WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerability
Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Frontend: from n/a through 4.3.13...
EUVD-2026-112860
Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Frontend: from n/a through 4.3.13...
CVE-2026-48884
The weDevs WP User Frontend WordPress plugin (versions up to and including 4.3.13 ) is vulnerable to a Missing Authorization (Broken Access Control) issue. This vulnerability allows for the exploitation of incorrectly configured access control security levels . While the specific technical root c...
CVE-2026-32572
Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...
CVE-2026-32572
The WP User Frontend Pro plugin for WordPress (versions
CVE-2026-32572 WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...