WordPress plugin
User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical2
- High12
- Medium29
- Low0
All User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission vulnerabilities
- High7.2Unauthenticated Stored Cross-Site Scripting via Taxonomy Field Text-Input
≤4.3.13Update to 4.3.14
- Medium6.1Reflected Cross-Site Scripting via 'field_attr[required]' Parameter
≤4.3.13Update to 4.3.14
- High8.8Authenticated (Subscriber+) Privilege Escalation via post_content Parameter
≤4.3.13Update to 4.3.14
- Medium4.3Missing Authorization
≤4.3.13Update to 4.3.14
- Medium5.3Missing Authorization
≤4.3.13Update to 4.3.14
- Medium6.1Reflected Cross-Site Scripting
≤4.3.13Update to 4.3.14
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpuf_payment_method' Parameter
≤4.3.12Update to 4.3.13
- High7.34.3.11 - Unauthenticated Privilege Escalation
3.5.29 – 4.3.11Update to 4.3.12
- Medium4.3Authenticated (Subscriber+) Subscription-Gated Post Creation
≤4.3.11Update to 4.3.12
- Medium5.34.3.11 - Missing Authorization
2.5.8 – 4.3.11Update to 4.3.12
- Medium6.3Authenticated (Subscriber+) Subscription Gate Bypass on Post Submission
≤4.3.11Update to 4.3.12
- High8.1Authenticated (Subscriber+) Arbitrary File Deletion
≤4.3.11Update to 4.3.12
- Medium5.3Unauthenticated Unauthorized User Registration
≤4.3.11Update to 4.3.12
- High7.5Authenticated (Subscriber+) PHP Object Injection
≤4.3.10Update to 4.3.11
- Medium5.3Missing Authorization to Unauthenticated Post Creation
≤4.3.10Update to 4.3.11
- High7.5Authenticated (Subscriber+) PHP Object Injection
≤4.3.10Update to 4.3.11
- Medium6.6Authenticated (Editor+) PHP Object Injection
<4.3.10Update to 4.3.10
- Medium5.3Unauthenticated Information Exposure
<4.3.10Update to 4.3.10
- Medium5.3Insecure Direct Object Reference to Unauthenticated Arbitrary Post Modification via 'wpuf_files_data' Parameter
≤4.3.7Update to 4.3.8
- Medium5.3Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'attach_id' Parameter
≤4.3.7Update to 4.3.8
- Medium5.3Unauthenticated Insecure Direct Object Reference to Arbitrary User Subscription Overwrite
≤4.3.1Update to 4.3.2
- Medium5.3Missing Authorization to Unauthenticated Media Attachment Deletion
<4.3.8Update to 4.3.8
- Medium5.3Missing Authorization
≤4.3.7Update to 4.3.8
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Subscription Pack Cancellation
≤4.3.2Update to 4.3.3
- High8.8Authenticated (Subscriber+) PHP Object Injection
≤4.3.1Update to 4.3.2
- Medium5.3Missing Authorization
≤4.3.1Update to 4.3.2
- Medium5.3Missing Authorization
≤4.2.8Update to 4.2.9
- Medium5.3Missing Authorization to Unauthenticated Arbitrary Post Modification via 'post_id' Parameter
≤4.2.8Update to 4.2.9
- Medium4.3Missing Authorization
≤4.2.5Update to 4.2.6
- High8.8Authenticated (Author+) Arbitrary File Upload
≤4.2.8Update to 4.2.9
- Medium5.3Missing Authorization to Unauthenticated Arbitrary Attachment Deletion
≤4.2.4Update to 4.2.5
- Medium5.4Authenticated (Subscriber+) Arbitrary Shortcode Execution
≤4.1.12Update to 4.1.13
- Medium5.4Missing Authorization
≤4.1.12Update to 4.1.13
- Critical9.1Authenticated (Administrator+) SQL Injection
≤4.0.7Update to 4.0.8
- Medium5.3Use of Polyfill.io
≤4.0.7Update to 4.0.8
- High8.8Authenticated (Author+) Privilege Escalation
≤3.6.5Update to 3.6.6
- Medium4.3Missing Authorization via AJAX actions
≤3.6.8Update to 3.6.9
- Medium4.3Missing Authorization
≤3.6.0Update to 3.6.1
- Medium4.3Cross-Site Request Forgery
≤3.6.0Update to 3.6.1
- High8.1Privilege Escalation
≤3.5.28Update to 3.5.29
- High8.8SQL Injection & Reflected Cross-Site Scripting
≤3.5.25Update to 3.5.26
- High7.2Authenticated (Admin+) SQL Injection
<3.5.25Update to 3.5.25
- Critical9.8Arbitrary File Upload
<2.3.11Update to 2.3.11
User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission: common questions
Does User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission have known vulnerabilities?
Yes. VulnCrest Radar lists 43 known vulnerabilities in User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission: 2 critical, 12 high, 29 medium. At least one is not fixed in the latest version.
How do I check which version of User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission vulnerability?
CVE-2026-109214, published Nov 6, 2026: User Frontend <= 4.3.13 - Unauthenticated Stored Cross-Site Scripting via Taxonomy Field Text-Input. Severity: High (CVSS 7.2).
Is any User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission vulnerability listed in CISA KEV?
No. None of the known User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission vulnerabilities is currently listed in the CISA KEV catalog.