Mmastodon TechnologyCybersecurity first seen 2 d ago, last 2 d ago, peak #11

WordPress User Frontend Plugin Vulnerability Allows Unauthorized Account Creation

Original: 🚨 EUVD-2026-89638 📊 Score: n/a 📦 Product: User Frontend 🏢 Vendor: Unknown 📅 Updated: 2026-09-30 📝 The User Frontend Word

A newly catalogued vulnerability, EUVD-2026-89638, affects the User Frontend WordPress plugin in versions before 4.3.12. The flaw lets unauthenticated users create accounts without checking whether the site permits user registration. Site owners running the plugin are advised to update, though details such as an official severity score and vendor confirmation are not yet available.

Why now: The flaw lets unauthenticated attackers create accounts on WordPress sites, a concern for administrators of the widely used platform.

User Frontend pluginWordPressEUVD

Open on mastodon →

Evidence

• 🚨 EUVD-2026-89638 📊 Score: n/a 📦 Product: User Frontend 🏢 Vendor: Unknown 📅 Updated: 2026-09-30 📝 The User Frontend WordPress plugin before 4.3.12 does not check whether the site allows user registration before creating an account, allowing unauthenticated users to create… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/456428