| CVE-2026-115277 |
The User Frontend WordPress plugin before 4.3.14 does not sanitise and escape some user-supplied values before…
|
4.7
Moyenne
|
30 oct. 2026 |
| CVE-2026-75823 |
The User Frontend WordPress plugin before 4.3.12 does not prevent tampering with the role assigned by its…
|
7.4
Élevée
|
30 sept. 2026 |
| CVE-2026-75824 |
The User Frontend WordPress plugin before 4.3.12 does not check whether the site allows user registration before…
|
5.3
Moyenne
|
30 sept. 2026 |
| CVE-2026-17563 |
The User Frontend WordPress plugin before 4.3.11 does not enforce its subscription-purchase requirement when…
|
5.3
Moyenne
|
2 sept. 2026 |
| CVE-2026-19116 |
The User Frontend WordPress plugin before 4.3.11 does not prevent user-supplied field values from being deserialized…
|
8.8
Élevée
|
2 sept. 2026 |
| CVE-2026-14567 |
The User Frontend WordPress plugin before 4.3.10 does not restrict access to its user directory search endpoint,…
|
5.3
Moyenne
|
28 août 2026 |
| CVE-2026-14558 |
The User Frontend WordPress plugin before 4.3.10 does not properly validate field type definitions and deserialises…
|
7.2
Élevée
|
28 août 2026 |