Vulnerabilities

Report: CVE-2026-42412 - WordPress WP User Frontend plugin <= 4.3.1 - broken access control vulnerability

2026-04-29 0 views admin

CVE ID :CVE-2026-42412 Published : April 29, 2026, 7:51 a.m. | 1 hour, 6 minutes ago Description :Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP User Frontend: from n/a through 4.3.1. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

CVE ID

CVE-2026-42412

Severity

MEDIUM

Published

April 29, 2026

🏷️ Tags

report42412wordpressfrontendpluginbrokenaccesscontrolvulnerabilitycve

InfinitSec - Latest Cybersecurity, Technology & Gaming News

Report: CVE-2026-42412 - WordPress WP User Frontend plugin <= 4.3.1 - broken access control vulnerability

CVE Details

🏷️ Tags

More from Vulnerabilities

Report: Update: CVE-2025-10503 - Reflected Cross-Site Scripting via Authentication Endpoint in WSO2 Identity Server

Report: Essential Guide: CVE-2026-42513 - Authentication Bypass Vulnerability in e-Sushrut HMIS

Report: Essential Guide: CVE-2026-42377 - WordPress SureForms Pro plugin <= 2.8.0 - broken access control vulnerability

Report: CVE-2026-42514 - Sensitive Data Exposure Vulnerability in e-Sushrut HMIS - Analysis

Trending

CVE-2025-61481: Critical Remote Code Execution Vulnerability in MikroTik RouterOS & SwitchOS

CVE-2025-43939: Dell Unity OS Command Injection (High)

Google disputes false claims of massive Gmail data breach

Microsoft: DNS outage impacts Azure and Microsoft 365 services

3.5B Accounts, 1 Critical Flaw: Meta Closes WhatsApp Data-Harvesting