<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: user-frontend</title><description>Every new CVE for user-frontend.</description><link>https://agentprime.io/</link><item><title>CVE-2026-115277: WP User Frontend &lt; 4.3.14 - Reflected XSS via &apos;field_attr&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-115277/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-115277/</guid><description>CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Oct 2026 06:00:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-75824: WP User Frontend 2.5.8 - 4.3.11 - Unauthenticated Account Creation with Registration Disabled</title><link>https://agentprime.io/advisories/CVE-2026-75824/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-75824/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Sep 2026 06:00:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-75823: WP User Frontend 3.5.29 - 4.3.11 - Unauthenticated Privilege Escalation via Registration Role Encryption</title><link>https://agentprime.io/advisories/CVE-2026-75823/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-75823/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Sep 2026 06:00:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-17563: WP User Frontend &lt; 4.3.11 - Unauthenticated Post Creation via Subscription-Gated Form</title><link>https://agentprime.io/advisories/CVE-2026-17563/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-17563/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 02 Sep 2026 14:16:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-19116: WP User Frontend &lt; 4.3.11 - Subscriber+ PHP Object Injection via Frontend Post Edit Form</title><link>https://agentprime.io/advisories/CVE-2026-19116/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-19116/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 02 Sep 2026 06:00:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-14567: WP User Frontend &lt; 4.3.10 - Unauthenticated User Email and Phone Disclosure via User Directory</title><link>https://agentprime.io/advisories/CVE-2026-14567/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-14567/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 28 Aug 2026 06:00:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-14558: WP User Frontend &lt; 4.3.10 - Editor+ PHP Object Injection via AI Form Builder</title><link>https://agentprime.io/advisories/CVE-2026-14558/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-14558/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 28 Aug 2026 06:00:15 GMT</pubDate><category>CVE</category></item></channel></rss>