WP User Frontend vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

WU

Product

WP User Frontend

by weDevs · last CVE Sep 23, 2026

14

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities14 In the news0 Timeline

Severity mix

Critical 1High 4Medium 9Low 0

Severity

All severities14 Critical1 High4 Medium9 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add WP User Frontend to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-24649	9.8	1%	Nov 21	The WP User Frontend WordPress plugin before 3.5.29 uses a user supplied argument called urhidden in its registration form, which contains the role for the account to be created… Affected: before 3.5.29
CVE-2026-81283	8.8	1%	Sep 2	WordPress WP User Frontend plugin <= 4.3.10 - PHP Object Injection vulnerability Affected: through 4.3.10
CVE-2021-25076	8.8	17%	Jan 24	The WP User Frontend WordPress plugin before 3.5.26 does not validate and escape the status parameter before using it in a SQL statement in the Subscribers dashboard, leading to… Affected: before 3.5.26
CVE-2026-32485	7.5	0%	Mar 25	WordPress WP User Frontend plugin <= 4.2.8 - Broken Access Control vulnerability Affected: through <= 4.2.8
CVE-2024-38693	7.2	0%	Aug 29	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP User Frontend allows SQL Injection.This issue affects WP User… Affected: before 4.0.8
CVE-2026-95525	6.5	0%	Sep 23	WordPress WP User Frontend plugin <= 4.3.11 - Arbitrary File Deletion vulnerability Affected: through 4.3.11
CVE-2026-95523	6.5	0%	Sep 23	WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability Affected: through 4.3.11
CVE-2026-57334	6.5	0%	Jun 29	WordPress WP User Frontend plugin <= 4.3.7 - Broken Access Control vulnerability Affected: through 4.3.7
CVE-2026-42412	6.5	0%	Apr 29	WordPress WP User Frontend plugin <= 4.3.1 - Broken Access Control vulnerability Affected: through 4.3.1
CVE-2026-24364	6.5	0%	Mar 25	WordPress WP User Frontend plugin <= 4.2.5 - Broken Access Control vulnerability Affected: through 4.2.5
CVE-2025-58672	5.4	0%	Sep 22	WordPress WP User Frontend Plugin <= 4.1.12 - Broken Access Control Vulnerability Affected: through 4.1.12
CVE-2025-58673	5.4	0%	Sep 22	WordPress WP User Frontend Plugin <= 4.1.12 - Content Injection Vulnerability Affected: through 4.1.12
CVE-2026-95524	5.3	0%	Sep 23	WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability Affected: through 4.3.11
CVE-2023-45002	4.3	0%	Jan 2	WordPress WP User Frontend plugin <= 3.6.8 - Broken Access Control vulnerability Affected: through 3.6.8