medium5.3
CVE-2026-75824
The User Frontend WordPress plugin before 4.3.12 does not check whether the site allows user registration before creating an account, allowing unauthenticated …
Impact
The User Frontend WordPress plugin before 4.3.12 does not check whether the site allows user registration before creating an account, allowing unauthenticated users to create accounts on sites where registration is disabled. The created account receives the site's default role.
Affected products
| Product | Affected versions |
|---|---|
| User Frontend WordPress Plugin | before 4.3.12 |
Versions were read from the advisory text. No structured product data has been published for this record yet.