User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission vulnerabilities

Product

User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission

by wedevs · last CVE Oct 10, 2026

CVEs

On KEV

6.4

Max CVSS

New 30D

Vulnerabilities1 In the news0 Timeline

Severity mix

Critical 0High 0Medium 1Low 0

Severity

All severities1 Critical0 High0 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-96574	6.4	0%	Oct 10	User Frontend <= 4.3.12 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpuf_payment_method' Parameter Affected: through 4.3.12