PT-2026-53295 · WordPress · Wp User Frontend

Perses + 1 · Published 2026-06-29 · Updated 2026-06-29 · CVE-2026-57334

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions WP User Frontend versions 4.3.7 and earlier

Description An unauthenticated broken access control issue exists, allowing unauthorized users to bypass security restrictions.

Recommendations Update WP User Frontend to a version later than 4.3.7.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-57334

Affected Products

Wp User Frontend

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-57334 · Security Note
• https://twitter.com/CVEnew/status/2071735290058707319 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/wp-user-frontend/vulnerability/wordpress-wp-user-frontend-plugin-4-3-7-broken-access-control-vulnerability?_s_id=cve · Note