6.5
Medium
CVE-2026-42412 Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Configured Access Control…
Description
Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP User Frontend: from n/a through 4.3.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP User Frontend 4.3 | earliest → 4.3.1 | No fix stated |
Other CVEs of WP User Frontend
The 15 CVEs of WP User Frontend →
CVE-2026-52708
Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured…
4.3
Medium
CVE-2026-48884
Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured…
5.3
Medium
CVE-2026-95525
Subscriber Arbitrary File Deletion in WP User Frontend <= 4.3.11 versions
6.5
Medium
CVE-2026-95523
Subscriber Bypass Vulnerability in WP User Frontend <= 4.3.11 versions
6.5
Medium