7.6
High
CVE-2024-38693 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP User…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP User Frontend allows SQL Injection.This issue affects WP User Frontend: from n/a through 4.0.7.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP User Frontend 4.0 | earliest → 4.0.7 | No fix stated |
Other CVEs of WP User Frontend
The 15 CVEs of WP User Frontend →
CVE-2026-52708
Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured…
4.3
Medium
CVE-2026-48884
Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured…
5.3
Medium
CVE-2026-95525
Subscriber Arbitrary File Deletion in WP User Frontend <= 4.3.11 versions
6.5
Medium
CVE-2026-95523
Subscriber Bypass Vulnerability in WP User Frontend <= 4.3.11 versions
6.5
Medium