4.3
Moyenne
CVE-2026-79618 The WP User Frontend WordPress plugin before 4.3.12 does not enforce its subscription-purchase requirement in one of its…
Description
The WP User Frontend WordPress plugin before 4.3.12 does not enforce its subscription-purchase requirement in one of its post-creation handlers, allowing authenticated users with subscriber-level access and above to create and, depending on the form's configuration, immediately publish posts through forms restricted to paying subscribers.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP User Frontend 4.3 | premières → < 4.3.12 | 4.3.12 |