5.3
Medium
CVE-2026-2233 The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for…
Description
The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the draft_post() function in all versions up to, and including, 4.2.8. This makes it possible for unauthenticated attackers to modify arbitrary posts (e.g. unpublish published posts and overwrite the contents) via the 'post_id' parameter.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration 4.2 | earliest → 4.2.8 | No fix stated |
Other CVEs of User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration
The 5 CVEs of User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration →
CVE-2026-4058
The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for…
4.3
Medium
CVE-2026-5127
The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for…
8.8
High
CVE-2026-1565
The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for…
8.8
High
CVE-2025-14047
The Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submission – WP…
5.3
Medium