Unknown User Frontend vulnerabilities
7 published CVEs name Unknown User Frontend among the affected products.
- 7Published CVEs7 of them scored
- 7Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-115277
WP User Frontend < 4.3.14 - Reflected XSS via 'field_attr' Parameter
Unknown · User Frontend
Medium4.7 - CVE-2026-75824
WP User Frontend 2.5.8 - 4.3.11 - Unauthenticated Account Creation with Registration Disabled
Unknown · User Frontend
Medium5.3 - CVE-2026-75823
WP User Frontend 3.5.29 - 4.3.11 - Unauthenticated Privilege Escalation via Registration Role Encryption
Unknown · User Frontend
High7.4 - CVE-2026-17563
WP User Frontend < 4.3.11 - Unauthenticated Post Creation via Subscription-Gated Form
Unknown · User Frontend
Medium5.3 - CVE-2026-19116
WP User Frontend < 4.3.11 - Subscriber+ PHP Object Injection via Frontend Post Edit Form
Unknown · User Frontend
High8.8 - CVE-2026-14567
WP User Frontend < 4.3.10 - Unauthenticated User Email and Phone Disclosure via User Directory
Unknown · User Frontend
Medium5.3 - CVE-2026-14558
WP User Frontend < 4.3.10 - Editor+ PHP Object Injection via AI Form Builder
Unknown · User Frontend
High7.2