Vulnerabilities / User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission
User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission vulnerabilities
Advisories WPSec published for User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission. Other sources may list more. Its attack surface: User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-02 | WPSEC-2026-0317 | User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission <= 4.3.12 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpuf_payment_method' Parameter | Medium 6.4 | 4.3.13 |
License: CC BY 4.0