5.3
Moyenne
CVE-2026-2233 The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for…
Description
The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the draft_post() function in all versions up to, and including, 4.2.8. This makes it possible for unauthenticated attackers to modify arbitrary posts (e.g. unpublish published posts and overwrite the contents) via the 'post_id' parameter.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration 4.2 | premières → 4.2.8 | Pas de correctif indiqué |
Autres CVE de User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration
Les 5 CVE de User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration →
CVE-2026-4058
The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for…
4.3
Moyenne
CVE-2026-5127
The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for…
8.8
Élevée
CVE-2026-1565
The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for…
8.8
Élevée
CVE-2025-14047
The Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submission – WP…
5.3
Moyenne