WP User Frontend vulnerabilities

3 known vulnerabilities in WP User Frontend from weDevs. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  WP User Frontend: Missing Authorization

  CVE-2026-32485Mar 25, 2026weDevs

  Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Frontend: from n/a through <= 4.2.8.

• 7.2 High severity

  WP User Frontend: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-38693Aug 29, 2024weDevs

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP User Frontend allows SQL Injection.This issue affects WP User Frontend: from n/a through 4.0.7.

• 7.2 High severity

  WP User Frontend: Improper Privilege Management

  CVE-2023-47682May 17, 2024weDevs

  Improper Privilege Management vulnerability in weDevs WP User Frontend allows Privilege Escalation.This issue affects WP User Frontend: from n/a through 3.6.5.