WP User Frontend vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

WU

Product

WP User Frontend

by weDevs · last CVE Oct 29, 2026

17

CVEs

0

On KEV

9.8

Max CVSS

2

New 30D

Vulnerabilities17 In the news0 Timeline

Severity mix

Critical 1High 5Medium 11Low 0

Severity

All severities17 Critical1 High5 Medium11 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add WP User Frontend to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-24649	9.8	1%	Nov 21	The WP User Frontend WordPress plugin before 3.5.29 uses a user supplied argument called urhidden in its registration form, which contains the role for the account to be created… Affected: before 3.5.29
CVE-2026-81283	8.8	1%	Sep 2	WordPress WP User Frontend plugin <= 4.3.10 - PHP Object Injection vulnerability Affected: through 4.3.10
CVE-2021-25076	8.8	17%	Jan 24	The WP User Frontend WordPress plugin before 3.5.26 does not validate and escape the status parameter before using it in a SQL statement in the Subscribers dashboard, leading to… Affected: before 3.5.26
CVE-2026-32485	7.5	0%	Mar 25	WordPress WP User Frontend plugin <= 4.2.8 - Broken Access Control vulnerability Affected: through <= 4.2.8
CVE-2024-38693	7.2	0%	Aug 29	WordPress WP User Frontend plugin <= 4.0.7 - SQL Injection vulnerability Affected: through 4.0.7
CVE-2023-47682	7.2	1%	May 17	WordPress WP User Frontend plugin <= 3.6.5 - Authenticated Privilege Escalation vulnerability Affected: through 3.6.5
CVE-2026-95525	6.5	0%	Sep 23	WordPress WP User Frontend plugin <= 4.3.11 - Arbitrary File Deletion vulnerability Affected: through 4.3.11
CVE-2026-95523	6.5	0%	Sep 23	WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability Affected: through 4.3.11
CVE-2026-57334	6.5	0%	Jun 29	WordPress WP User Frontend plugin <= 4.3.7 - Broken Access Control vulnerability Affected: through 4.3.7
CVE-2026-42412	6.5	0%	Apr 29	WordPress WP User Frontend plugin <= 4.3.1 - Broken Access Control vulnerability Affected: through 4.3.1
CVE-2026-24364	6.5	0%	Mar 25	WordPress WP User Frontend plugin <= 4.2.5 - Broken Access Control vulnerability Affected: through 4.2.5
CVE-2025-58672	5.4	0%	Sep 22	WordPress WP User Frontend Plugin <= 4.1.12 - Broken Access Control Vulnerability Affected: through 4.1.12
CVE-2025-58673	5.4	0%	Sep 22	WordPress WP User Frontend Plugin <= 4.1.12 - Content Injection Vulnerability Affected: through 4.1.12
CVE-2026-48884 New	5.3	–	Oct 29	WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerability Affected: through 4.3.13
CVE-2026-95524	5.3	0%	Sep 23	WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability Affected: through 4.3.11
CVE-2026-52708 New	4.3	–	Oct 29	WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerability Affected: through 4.3.13
CVE-2023-45002	4.3	0%	Jan 2	WordPress WP User Frontend plugin <= 3.6.8 - Broken Access Control vulnerability Affected: through 3.6.8