Advisories · Technology

WP User Frontend.

Every CVE that names WP User Frontend among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-79618 CVE record

CVSS 4.3 Medium

WP User Frontend < 4.3.12 - Subscriber+ Post Creation via Subscription-Gated Form
- WP User Frontend
- Broken access control
Not analysed yet 2 Oct 2026
CVE-2021-24649 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WP User Frontend < 3.5.29 - Obscure Registration as Admin
- WP User Frontend
Not analysed yet 21 Nov 2022