User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration vulnerabilities

Product

User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration

by wedevs · last CVE Jun 9, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities5 In the news0 Timeline

Severity mix

Critical 0High 2Medium 3Low 0

Severity

All severities5 Critical0 High2 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-5127	8.8	1%	May 8	User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Authenticated (Subscriber+) PHP Object Injection Affected: through 4.3.1
CVE-2026-1565	8.8	1%	Feb 26	User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Authenticated (Author+) Arbitrary File Upload Affected: through 4.2.8