PT-2026-28001 · WordPress · Wp User Frontend

CVE-2026-32485 · Publicado 2026-03-25 · Atualizado 2026-04-07

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions weDevs WP User Frontend versions prior to 4.2.9

Description An authorization issue exists in weDevs WP User Frontend. Incorrectly configured access control security levels can be exploited.

Recommendations Update to a version prior to 4.2.9.

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2026-32485

Produtos afetados

Wp User Frontend

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-32485 · Nota de Segurança
• https://patchstack.com/database/Wordpress/Plugin/wp-user-frontend/vulnerability/wordpress-wp-user-frontend-plugin-4-2-8-broken-access-control-vulnerability?_s_id=cve · Nota
• https://twitter.com/atomicedgeWAF/status/2041388009375830058 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2038250184799314108 · Publicação no Twitter