| CVE-2026-115277 |
The User Frontend WordPress plugin before 4.3.14 does not sanitise and escape some user-supplied values before…
|
4.7
Medium
|
Oct 30, 2026 |
| CVE-2026-75823 |
The User Frontend WordPress plugin before 4.3.12 does not prevent tampering with the role assigned by its…
|
7.4
High
|
Sep 30, 2026 |
| CVE-2026-75824 |
The User Frontend WordPress plugin before 4.3.12 does not check whether the site allows user registration before…
|
5.3
Medium
|
Sep 30, 2026 |
| CVE-2026-17563 |
The User Frontend WordPress plugin before 4.3.11 does not enforce its subscription-purchase requirement when…
|
5.3
Medium
|
Sep 2, 2026 |
| CVE-2026-19116 |
The User Frontend WordPress plugin before 4.3.11 does not prevent user-supplied field values from being deserialized…
|
8.8
High
|
Sep 2, 2026 |
| CVE-2026-14567 |
The User Frontend WordPress plugin before 4.3.10 does not restrict access to its user directory search endpoint,…
|
5.3
Medium
|
Aug 28, 2026 |
| CVE-2026-14558 |
The User Frontend WordPress plugin before 4.3.10 does not properly validate field type definitions and deserialises…
|
7.2
High
|
Aug 28, 2026 |