CVE-2026-48884: WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerability
Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Frontend: from n/a through 4.3.13.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
weDevs WP User Frontend (wp-user-frontend)to a version that resolves this vulnerability.Fixed in 4.3.14
Event History
Frequently Asked Questions
Who can exploit this issue?
The vulnerability is remotely exploitable without authentication or user interaction. The available data indicates that affected installations are exposed over the network.
What is the potential impact?
Successful exploitation can result in unauthorized modification of data or functionality. The provided CVSS vector indicates no confidentiality impact and no availability impact.
Which versions are affected?
WP User Frontend versions through 4.3.13 are affected. No fixed version is identified in the provided data.