Vulnerability · Published Sep 30, 2026 · Assigned by WPScan

CVE-2026-75823WP User Frontend 3.5.29 - 4.3.11 - Unauthenticated Privilege Escalation via Registration Role Encryption

High 7.4

In plain English

A high-severity privilege mismanagement in User Frontend from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).

Severity (CVSS 3.1)7.4High

Exploit odds (30 days)0.2%top 83.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

The User Frontend WordPress plugin before 4.3.12 does not prevent tampering with the role assigned by its registration form, allowing unauthenticated users to register with a higher privileged role, such as Editor. This affects installations running a PHP build where the sodium extension is unavailable, and where a registration page has been configured. The administrator role cannot be obtained this way.

Affected products (as reported)

Vendor	Product	Versions
Unknown	User Frontend	3.5.29 – before 4.3.12

Weakness: CWE-269 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

References

https://wpscan.com/vulnerability/4a385690-3471-4604-aa2a-e120bb31ca53/ exploit, vdb-entry, technical-description