Wedevs Wp_user_frontend
3 CVEs affecting Wedevs Wp_user_frontend. Latest disclosed: 2024-08-29. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-24649 | Critical | 9.8 | 2022-11-21 | The WP User Frontend WordPress plugin before 3.5.29 uses a user supplied argument called urhidden in its registration form, which contains the role for the acc… |
CVE-2021-25076 | High | 8.8 | 2022-01-24 | The WP User Frontend WordPress plugin before 3.5.26 does not validate and escape the status parameter before using it in a SQL statement in the Subscribers das… |
CVE-2024-38693 | High | 7.6 | 2024-08-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP User Frontend allows SQL Injection.This issue a… |