High
CVE-2026-1565
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 40
Reset filters
Medium
CVE-2025-14047
WP User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion
Medium
CVE-2025-58672
WP User Frontend <= 4.1.12 - Missing Authorization
Medium
CVE-2025-58673
WP User Frontend <= 4.1.12 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
High
CVE-2025-3055
WP User Frontend Pro <= 4.1.3 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2025-3054
WP User Frontend Pro <= 4.1.3 - Authenticated (Subscriber+) Arbitrary File Upload
Critical
CVE-2024-38693
WP User Frontend <= 4.0.7 - Authenticated (Administrator+) SQL Injection
Medium
379a5016-3968-4b28-8d6e-0f517e419016
Various Plugins <= Various Version - Use of Polyfill.io
High
CVE-2023-47682
WP User Frontend <= 3.6.5 - Authenticated (Author+) Privilege Escalation
Medium
CVE-2023-45002
WP User Frontend <= 3.6.8 - Missing Authorization via AJAX actions
Medium
84003388-c47c-41db-8d2d-4643aa375a89
Appsero <= 1.2.1 - Missing Authorization
Medium
CVE-2022-47150
Appsero <= 1.2.0 - Cross-Site Request Forgery
High
CVE-2021-24649
WP User Frontend <= 3.5.28 - Privilege Escalation
High
CVE-2021-25076
WP User Frontend <= 3.5.25 - SQL Injection & Reflected Cross-Site Scripting
High
3c476263-72b7-48f1-8ba3-91d69eae7b6a
WP User Frontend – Membership, Profile, Registration & Post Submission Plugin for WordPress < 3.5.25 - Authenticated (Admin+) SQL Injection
Critical
8a2186c9-fa27-4d7d-be41-c82711c49334
WP User Frontend < 2.3.11 - Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.