WordPress plugin
User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical2
- High12
- Medium29
- Low0
All User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission vulnerabilities
Nothing in this view
No vulnerabilities match this filter. Show all.
User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission: common questions
Does User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission have known vulnerabilities?
Yes. VulnCrest Radar lists 43 known vulnerabilities in User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission: 2 critical, 12 high, 29 medium. At least one is not fixed in the latest version.
How do I check which version of User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission vulnerability?
CVE-2026-109214, published Nov 6, 2026: User Frontend <= 4.3.13 - Unauthenticated Stored Cross-Site Scripting via Taxonomy Field Text-Input. Severity: High (CVSS 7.2).
Is any User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission vulnerability listed in CISA KEV?
No. None of the known User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission vulnerabilities is currently listed in the CISA KEV catalog.