CVE-2026-103962

The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'fieldattrrequired' parameter in all versions up to, and including, 4.3.13 due to...

CVE-2026-103962

The User Frontend WordPress plugin (versions up to and including 4.3.13 ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping related to the 'field_attr[required]' parameter. An unauthenticated attacker can inject arbitrary...

EUVD-2026-114651

The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'fieldattrrequired' parameter in all versions up to, and including, 4.3.13 due to...

CVE-2026-103962: wedevs: The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend…

The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'fieldattrrequired' parameter in all versions up to, and including, 4.3.13 due to...