Advisories · Technology

weDevs WP User Frontend.

Every CVE that names weDevs WP User Frontend among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-52708 CVE record

CVSS 4.3 Medium

WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerability
- weDevs WP User Frontend
- Broken access control
Not analysed yet 29 Oct 2026
CVE-2026-48884 CVE record

CVSS 5.3 Medium

WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerability
- weDevs WP User Frontend
- Broken access control
Not analysed yet 29 Oct 2026
CVE-2026-95525 CVE record

CVSS 6.5 Medium

WordPress WP User Frontend plugin <= 4.3.11 - Arbitrary File Deletion vulnerability
- weDevs WP User Frontend
- Path traversal
Not analysed yet 23 Sept 2026
CVE-2026-95524 CVE record

CVSS 5.3 Medium

WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability
- weDevs WP User Frontend
- Authentication bypass
Not analysed yet 23 Sept 2026
CVE-2026-95523 CVE record

CVSS 6.5 Medium

WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability
- weDevs WP User Frontend
- Authentication bypass
Not analysed yet 23 Sept 2026
CVE-2026-81283 CVE record

CVSS 8.8 High

WordPress WP User Frontend plugin <= 4.3.10 - PHP Object Injection vulnerability
- weDevs WP User Frontend
- Insecure deserialization
Not analysed yet 2 Sept 2026
CVE-2026-57334 CVE record

CVSS 6.5 Medium

WordPress WP User Frontend plugin <= 4.3.7 - Broken Access Control vulnerability
- weDevs WP User Frontend
- Broken access control
Not analysed yet 29 Jun 2026
CVE-2026-42412 CVE record

CVSS 6.5 Medium

WordPress WP User Frontend plugin <= 4.3.1 - Broken Access Control vulnerability
- weDevs WP User Frontend
- Broken access control
Not analysed yet 29 Apr 2026
CVE-2026-32485 CVE record

CVSS 7.5 High

WordPress WP User Frontend plugin <= 4.2.8 - Broken Access Control vulnerability
- weDevs WP User Frontend
- Broken access control
Not analysed yet 25 Mar 2026
CVE-2026-24364 CVE record

CVSS 6.5 Medium

WordPress WP User Frontend plugin <= 4.2.5 - Broken Access Control vulnerability
- weDevs WP User Frontend
- Broken access control
Not analysed yet 25 Mar 2026
CVE-2025-58672 CVE record

CVSS 5.4 Medium

WordPress WP User Frontend Plugin <= 4.1.12 - Broken Access Control Vulnerability
- weDevs WP User Frontend
- Broken access control
Not analysed yet 22 Sept 2025
CVE-2025-58673 CVE record

CVSS 5.4 Medium

WordPress WP User Frontend Plugin <= 4.1.12 - Content Injection Vulnerability
- weDevs WP User Frontend
- Code injection
Not analysed yet 22 Sept 2025
CVE-2023-45002 CVE record

CVSS 4.3 Medium

WordPress WP User Frontend plugin <= 3.6.8 - Broken Access Control vulnerability
- weDevs WP User Frontend
- Broken access control
Not analysed yet 2 Jan 2025
CVE-2024-38693 CVE record

CVSS 7.6 High

WordPress WP User Frontend plugin <= 4.0.7 - SQL Injection vulnerability
- weDevs WP User Frontend
- SQL injection
Not analysed yet 29 Aug 2024
CVE-2023-47682 CVE record

CVSS 7.2 High

WordPress WP User Frontend plugin <= 3.6.5 - Authenticated Privilege Escalation vulnerability
- weDevs WP User Frontend
- Privilege escalation
Not analysed yet 17 May 2024