Advisories · Technology
User Frontend.
Every CVE that names User Frontend among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.7 Medium
WP User Frontend < 4.3.14 - Reflected XSS via 'field_attr' Parameter
- User Frontend
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
WP User Frontend 2.5.8 - 4.3.11 - Unauthenticated Account Creation with Registration Disabled
- User Frontend
- Broken access control
- CVSS 7.4 High
WP User Frontend 3.5.29 - 4.3.11 - Unauthenticated Privilege Escalation via Registration Role Encryption
- User Frontend
- Privilege escalation
- CVSS 5.3 Medium
WP User Frontend < 4.3.11 - Unauthenticated Post Creation via Subscription-Gated Form
- User Frontend
- Broken access control
- CVSS 8.8 High
WP User Frontend < 4.3.11 - Subscriber+ PHP Object Injection via Frontend Post Edit Form
- User Frontend
- Insecure deserialization
- CVSS 5.3 Medium
WP User Frontend < 4.3.10 - Unauthenticated User Email and Phone Disclosure via User Directory
- User Frontend
- Information disclosure
- CVSS 7.2 High
WP User Frontend < 4.3.10 - Editor+ PHP Object Injection via AI Form Builder
- User Frontend
- Insecure deserialization