Live › vulnerability › CVE-2026-48884
WP User Frontend is a WordPress plugin for user registration and front-end profile forms. Missing authorization checks let an attacker exploit incorrectly configured access control levels, per the NVD description.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 15:25 UTC. All times on this page are UTC.
Sites running WP User Frontend version 4.3.13 or earlier are in the affected range, per NVD. The sources do not describe the exact configuration needed to reach the flaw, so unknown whether default settings are exposed.
No product ranges from the sources yet.
wp-content/plugins/wp-user-frontend/ header.4.3.13 or earlier.4.3.13; the sources do not name the exact fixed version.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Frontend: from n/a through 4.3.13.
This page as .md · .json · in your agent: get_signal("CVE-2026-48884")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.