User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration vulnerabilities

Product

User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration

by wedevs · last CVE Jun 9, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities5 In the news0 Timeline

Severity mix

Critical 0High 2Medium 3Low 0

Severity

All severities5 Critical0 High2 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-5127	8.8	1%	May 8	User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Authenticated (Subscriber+) PHP Object Injection Affected: through 4.3.1
CVE-2026-1565	8.8	1%	Feb 26	User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Authenticated (Author+) Arbitrary File Upload Affected: through 4.2.8
CVE-2026-2233	5.3	0%	Mar 15	User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Missing Authorization to Unauthenticated Arbitrary Post Modification via 'post_id' Parameter Affected: through 4.2.8
CVE-2025-14047	5.3	1%	Jan 2	WP User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion Affected: through 4.2.4
CVE-2026-4058	4.3	0%	Jun 9	User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.2 - Missing Authorization to Authenticated (Subscriber+) Subscription Pack Cancellation Affected: through 4.3.2