PT-2026-56713 · Wedevs · User Frontend: Ai Powered Frontend Posting

Kim Chanyeop · Published 2026-07-09 · Updated 2026-07-09 · CVE-2026-12418

NVD

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.3.7 via the 'wpuf files data' parameter due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to overwrite the post title, post content, and post excerpt of any arbitrary post on the site, including posts authored by administrators. Exploitation requires access to any WPUF post submission form; this is achievable by users with no WordPress role, as the wpuf submit post AJAX action is gated only by a nonce with no capability check for the downstream post-edit operation.

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2026-12418

Affected Products

User Frontend: Ai Powered Frontend Posting

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-12418 · Security Note
• https://wordfence.com/threat-intel/vulnerabilities/id/8f66e25f-b67e-4227-95fe-69b40551af61?source=cve · Note
• https://plugins.trac.wordpress.org/browser/wp-user-frontend/tags/4.3.1/includes/Traits/FieldableTrait.php#L468 · Note
• https://plugins.trac.wordpress.org/browser/wp-user-frontend/tags/4.3.6/includes/Traits/FieldableTrait.php#L468 · Note
• https://plugins.trac.wordpress.org/changeset?reponame=&old=3578622%40wp-user-frontend&new=3578622%40wp-user-frontend · Note
• https://plugins.trac.wordpress.org/browser/wp-user-frontend/tags/4.3.1/includes/Traits/FieldableTrait.php#L478 · Note
• https://plugins.trac.wordpress.org/browser/wp-user-frontend/tags/4.3.6/includes/Ajax/Frontend_Form_Ajax.php#L35 · Note
• https://plugins.trac.wordpress.org/browser/wp-user-frontend/tags/4.3.6/includes/Traits/FieldableTrait.php#L478 · Note
• https://plugins.trac.wordpress.org/browser/wp-user-frontend/tags/4.3.1/includes/Ajax/Frontend_Form_Ajax.php#L35 · Note