Advisories · Technology
wedevs User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration.
Every CVE that names wedevs User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.2 - Missing Authorization to Authenticated (Subscriber+) Subscription Pack Cancellation
- wedevs User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration
- Broken access control
- CVSS 8.8 High
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Authenticated (Subscriber+) PHP Object Injection
- wedevs User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration
- Insecure deserialization
- CVSS 5.3 Medium
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Missing Authorization to Unauthenticated Arbitrary Post Modification via 'post_id' Param…
- wedevs User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration
- Broken access control
- CVSS 8.8 High
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Authenticated (Author+) Arbitrary File Upload
- wedevs User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration
- Unrestricted file upload
- CVSS 5.3 Medium
WP User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion
- wedevs User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration
- Broken access control