Skip to content
WeDevs User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission
-
CVE-2026-109214
High 7.2
User Frontend <= 4.3.13 - Unauthenticated Stored Cross-Site Scripting via Taxonomy Field Text-Input
–
-
CVE-2026-120070
High 8.8
User Frontend <= 4.3.13 - Authenticated (Subscriber+) Privilege Escalation via post_content Parameter
0.3%
-
CVE-2026-103962
Medium 6.1
User Frontend <= 4.3.13 - Reflected Cross-Site Scripting via 'field_attr[required]' Parameter
0.2%
-
CVE-2026-96574
Medium 6.4
User Frontend <= 4.3.12 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpuf_payment_method' Parameter
0.2%