7.6
Élevée
CVE-2024-38693 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP User…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP User Frontend allows SQL Injection.This issue affects WP User Frontend: from n/a through 4.0.7.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP User Frontend 4.0 | premières → 4.0.7 | Pas de correctif indiqué |
Autres CVE de WP User Frontend
Les 15 CVE de WP User Frontend →
CVE-2026-52708
Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured…
4.3
Moyenne
CVE-2026-48884
Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured…
5.3
Moyenne
CVE-2026-95525
Subscriber Arbitrary File Deletion in WP User Frontend <= 4.3.11 versions
6.5
Moyenne
CVE-2026-95523
Subscriber Bypass Vulnerability in WP User Frontend <= 4.3.11 versions
6.5
Moyenne