Login Request a demo
WU
Product
WP User Frontend
by weDevs · last CVE Oct 29, 2026
17
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities17In the news0Timeline
Severity mix
Critical 1High 5Medium 11Low 0
Severity
All severities17Critical1High5Medium11Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WP User Frontend to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-81283
8.8
1%
Sep 2
WordPress WP User Frontend plugin <= 4.3.10 - PHP Object Injection vulnerability
Affected: through 4.3.10
CVE-2021-25076
8.8
17%
Jan 24
The WP User Frontend WordPress plugin before 3.5.26 does not validate and escape the status parameter before using it in a SQL statement in the Subscribers dashboard, leading to…
Affected: before 3.5.26
CVE-2026-32485
7.5
0%
Mar 25
WordPress WP User Frontend plugin <= 4.2.8 - Broken Access Control vulnerability
Affected: through <= 4.2.8
CVE-2024-38693
7.2
0%
Aug 29
WordPress WP User Frontend plugin <= 4.0.7 - SQL Injection vulnerability
Affected: through 4.0.7
CVE-2023-47682
7.2
1%
May 17
WordPress WP User Frontend plugin <= 3.6.5 - Authenticated Privilege Escalation vulnerability
Affected: through 3.6.5
Showing 5