CVE Tools
Track your stack

Wp User Frontend

15 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Wp User Frontend, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Wp User Frontend CVEs per month

Oct 2024 to Sep 2026. Point at a month, or focus the strip and use the arrow keys.
Wp User Frontend CVEs per month
MonthCVEs
2024-100
2024-110
2024-120
2025-011
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-092
2025-100
2025-110
2025-120
2026-010
2026-020
2026-032
2026-041
2026-050
2026-061
2026-070
2026-080
2026-094

Severity

How the 15 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical17%
  • High533%
  • Medium960%

Latest CVEs

The 15 most recently published vulnerabilities affecting Wp User Frontend.

  1. CVE-2026-95525WordPress WP User Frontend plugin <= 4.3.11 - Arbitrary File Deletion vulnerability6.5
  2. CVE-2026-95524WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability5.3
  3. CVE-2026-95523WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability6.5
  4. CVE-2026-81283WordPress WP User Frontend plugin <= 4.3.10 - PHP Object Injection vulnerability8.8
  5. CVE-2026-57334WordPress WP User Frontend plugin <= 4.3.7 - Broken Access Control vulnerability6.5
  6. CVE-2026-42412WordPress WP User Frontend plugin <= 4.3.1 - Broken Access Control vulnerability6.5
  7. CVE-2026-32485WordPress WP User Frontend plugin <= 4.2.8 - Broken Access Control vulnerability7.5
  8. CVE-2026-24364WordPress WP User Frontend plugin <= 4.2.5 - Broken Access Control vulnerability6.5
  9. CVE-2025-58672WordPress WP User Frontend Plugin <= 4.1.12 - Broken Access Control Vulnerability5.4
  10. CVE-2025-58673WordPress WP User Frontend Plugin <= 4.1.12 - Content Injection Vulnerability5.4
  11. CVE-2023-45002WordPress WP User Frontend plugin <= 3.6.8 - Broken Access Control vulnerability4.3
  12. CVE-2024-38693WordPress WP User Frontend plugin <= 4.0.7 - SQL Injection vulnerability7.6
  13. CVE-2023-47682WordPress WP User Frontend plugin <= 3.6.5 - Authenticated Privilege Escalation vulnerability7.2
  14. CVE-2021-24649WP User Frontend < 3.5.29 - Obscure Registration as Admin9.8
  15. CVE-2021-25076WP User Frontend < 3.5.26 - SQL Injection to Reflected Cross-Site Scripting8.8

Product grouping is registry-driven, with AI assist and human review. How it works

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store