VulnTitan VulnTitan Security command center
Plugin Vulnerability Hub
Plugin 12 known issues Latest disclosed Mar 14, 2026

User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration Vulnerabilities

Review known vulnerability records for the WordPress plugin User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration (`wp-user-frontend`), including severity, CVE references, affected versions, and patch status.

View on WordPress.org Back to Feed
Known Records
12
High or Critical
7
Linked CVEs
10
Last Updated
Mar 14, 2026
Coverage Snapshot

What this page helps you verify fast

This hub clusters every indexed record for User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration so operators can quickly confirm whether a disclosed issue maps to the installed slug and version range.

Patch Visibility
12 records include a published patch path.
Severity Mix
2 critical and 5 high severity findings.
Reference Workflow
Jump from the hub into the full report when you need remediation notes, CVSS vector details, or source references.
Known Vulnerabilities

Reports for User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration

Sorted by latest disclosure date so newly published issues surface first.

Plugin Medium Patched: Yes CVE-2026-2233
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Missing Authorization to Unauthenticated Arbitrary Post Modification via 'post_id' Parameter

The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the draft_post() function in all versions up to, and including, 4.2...

Published
Mar 14, 2026
Patched Release
4.2.9
Affected Versions
Versions up to 4.2.8
Next Step
Update to 4.2.9 or newer if supported.
Open Full Report Open CVE Reference
Plugin High Patched: Yes CVE-2026-1565
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Authenticated (Author+) Arbitrary File Upload

The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'WPUF_Admin_Settings::check_filetype_and_ext' function and in the 'Adm...

Published
Feb 26, 2026
Patched Release
4.2.9
Affected Versions
Versions up to 4.2.8
Next Step
Update to 4.2.9 or newer if supported.
Open Full Report Open CVE Reference
Plugin Medium Patched: Yes CVE-2025-14047
WP User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion

The Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submission – WP User Frontend plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'Frontend_Form_Ajax::submit_post' function in...

Published
Jan 01, 2026
Patched Release
4.2.5
Affected Versions
Versions up to 4.2.4
Next Step
Update to 4.2.5 or newer if supported.
Open Full Report Open CVE Reference
Plugin Medium Patched: Yes CVE-2025-58672
WP User Frontend <= 4.1.12 - Missing Authorization

The WP User Frontend plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 4.1.12. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unaut...

Published
Sep 22, 2025
Patched Release
4.1.13
Affected Versions
Versions up to 4.1.12
Next Step
Update to 4.1.13 or newer if supported.
Open Full Report Open CVE Reference
Plugin Medium Patched: Yes CVE-2025-58673
WP User Frontend <= 4.1.12 - Authenticated (Subscriber+) Arbitrary Shortcode Execution

The The Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submission – WP User Frontend plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.1.12. This is due to the software allow...

Published
Sep 22, 2025
Patched Release
4.1.13
Affected Versions
Versions up to 4.1.12
Next Step
Update to 4.1.13 or newer if supported.
Open Full Report Open CVE Reference
Plugin Critical Patched: Yes CVE-2024-38693
WP User Frontend <= 4.0.7 - Authenticated (Administrator+) SQL Injection

The WP User Frontend plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in versions up to, and including, 4.0.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it pos...

Published
Aug 01, 2024
Patched Release
4.0.8
Affected Versions
Versions up to 4.0.7
Next Step
Update to 4.0.8 or newer if supported.
Open Full Report Open CVE Reference
Plugin High Patched: Yes CVE-2023-47682
WP User Frontend <= 3.6.5 - Authenticated (Author+) Privilege Escalation

The WP User Frontend – Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submission Plugin plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.6.5. This is due to the plugin not providing...

Published
Nov 09, 2023
Patched Release
3.6.6
Affected Versions
Versions up to 3.6.5
Next Step
Update to 3.6.6 or newer if supported.
Open Full Report Open CVE Reference
Plugin Medium Patched: Yes CVE-2023-45002
WP User Frontend <= 3.6.8 - Missing Authorization via AJAX actions

The WP User Frontend plugin for WordPress is vulnerable to unauthorized functionality use due to a missing capability check on several functions corresponding to AJAX actions in versions up to, and including, 3.6.8. This makes it possible for authenticated attackers, with subscri...

Published
Oct 03, 2023
Patched Release
3.6.9
Affected Versions
Versions up to 3.6.8
Next Step
Update to 3.6.9 or newer if supported.
Open Full Report Open CVE Reference
Plugin High Patched: Yes CVE-2021-24649
WP User Frontend <= 3.5.28 - Privilege Escalation

The WP User Frontend plugin for WordPress is vulnerable to privilege escalation due to the default user role checking on the process_registration function in versions up to, and including, 3.5.28 which accepts user supplied input via the urhidden value. This makes it possible for...

Published
Oct 31, 2022
Patched Release
3.5.29
Affected Versions
Versions up to 3.5.28
Next Step
Update to 3.5.29 or newer if supported.
Open Full Report Open CVE Reference
Plugin High Patched: Yes CVE-2021-25076
WP User Frontend <= 3.5.25 - SQL Injection & Reflected Cross-Site Scripting

The WP User Frontend WordPress plugin before 3.5.26 does not validate and escape the status parameter before using it in a SQL statement in the Subscribers dashboard, leading to an SQL injection. Due to the lack of sanitisation and escaping, this could also lead to Reflected Cros...

Published
Dec 27, 2021
Patched Release
3.5.26
Affected Versions
Versions up to 3.5.25
Next Step
Update to 3.5.26 or newer if supported.
Open Full Report Open CVE Reference
Plugin High Patched: Yes
WP User Frontend – Membership, Profile, Registration & Post Submission Plugin for WordPress < 3.5.25 - Authenticated (Admin+) SQL Injection

The WP User Frontend – Membership, Profile, Registration & Post Submission Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the ‘post_id’ parameter in versions before 3.5.25 due to insufficient escaping on the user supplied parameter and lack of suffic...

Published
Nov 18, 2021
Patched Release
3.5.25
Affected Versions
Versions before 3.5.25
Next Step
Update to 3.5.25 or newer if supported.
Open Full Report
Plugin Critical Patched: Yes
WP User Frontend < 2.3.11 - Arbitrary File Upload

The WP User Frontend plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpuf_file_upload' and 'wpuf_insert_image' AJAX actions in versions before 2.3.11. This makes it possible for unauthenticated attackers to upload arbitrary...

Published
Feb 08, 2016
Patched Release
2.3.11
Affected Versions
Versions before 2.3.11
Next Step
Update to 2.3.11 or newer if supported.
Open Full Report