Mmastodon TechnologyCybersecurity first seen 2 d ago, last 2 d ago, peak #12

WordPress User Frontend plugin vulnerability allows role tampering

Original: 🚨 EUVD-2026-89639 📊 Score: n/a 📦 Product: User Frontend 🏢 Vendor: Unknown 📅 Updated: 2026-09-30 📝 The User Frontend Word

A new vulnerability entry, EUVD-2026-89639, was published concerning the User Frontend WordPress plugin. Versions before 4.3.12 fail to prevent tampering with the role assigned by its registration form, potentially letting unauthenticated users register with elevated privileges. Administrators running the plugin are advised to update to 4.3.12 or later. No severity score has been assigned yet.

Why now: A newly disclosed vulnerability in a widely used WordPress plugin raises privilege-escalation concerns for site administrators.

User Frontend pluginWordPressEUVD-2026-89639

Open on mastodon →

Evidence

• 🚨 EUVD-2026-89639 📊 Score: n/a 📦 Product: User Frontend 🏢 Vendor: Unknown 📅 Updated: 2026-09-30 📝 The User Frontend WordPress plugin before 4.3.12 does not prevent tampering with the role assigned by its registration form, allowing unauthenticated users to register with a… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/456429