WeDevs User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration

• CVE-2026-12418 Medium 5.3 User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.7 - Insecure Direct Object Reference to Unauthenticated Arbitrary Post Modification via 'wpuf_files_data' Parameter 0.4%
• CVE-2026-12406 Medium 5.3 User Frontend <= 4.3.7 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'attach_id' Parameter 0.6%
• CVE-2026-5459 Medium 5.3 User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Subscription Overwrite 0.3%