Known vulnerabilities in wedevs WP User Frontend
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-52708 | Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured… | 4.3 Medium | Oct 29, 2026 |
| CVE-2026-48884 | Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured… | 5.3 Medium | Oct 29, 2026 |
| CVE-2026-95525 | Subscriber Arbitrary File Deletion in WP User Frontend <= 4.3.11 versions | 6.5 Medium | Sep 23, 2026 |
| CVE-2026-95523 | Subscriber Bypass Vulnerability in WP User Frontend <= 4.3.11 versions | 6.5 Medium | Sep 23, 2026 |
| CVE-2026-95524 | Unauthenticated Bypass Vulnerability in WP User Frontend <= 4.3.11 versions | 5.3 Medium | Sep 23, 2026 |
| CVE-2026-81283 | Subscriber PHP Object Injection in WP User Frontend <= 4.3.10 versions | 8.8 High | Sep 2, 2026 |
| CVE-2026-57334 | Unauthenticated Broken Access Control in WP User Frontend <= 4.3.7 versions | 6.5 Medium | Jun 29, 2026 |
| CVE-2026-42412 | Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Configured Access Control… | 6.5 Medium | Apr 29, 2026 |
| CVE-2026-32485 | Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured… | 7.5 High | Mar 25, 2026 |
| CVE-2026-24364 | Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured… | 6.5 Medium | Mar 25, 2026 |
| CVE-2025-58672 | Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured… | 5.4 Medium | Sep 22, 2025 |
| CVE-2025-58673 | Improper Control of Generation of Code ('Code Injection') vulnerability in weDevs WP User Frontend wp-user-frontend… | 5.4 Medium | Sep 22, 2025 |
| CVE-2023-45002 | Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Configured Access Control… | 4.3 Medium | Jan 2, 2025 |
| CVE-2024-38693 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP User… | 7.6 High | Aug 29, 2024 |
| CVE-2023-47682 | Improper Privilege Management vulnerability in weDevs WP User Frontend allows Privilege Escalation.This issue affects WP… | 7.2 High | May 17, 2024 |
Other wedevs products
Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker 12
WP ERP 11
WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts 11
WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting 9
WP Project Manager 9
ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support 8
Dokan Pro 7
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot 6
Happy Addons for Elementor 6
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce 5
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration 5
weMail 4