Unrated
Front End Users <= 3.2.35 - Unauthenticated Membership Level and Account Status Self-Assignment
Type: advisorySource: Official CVE List
The Front End Users WordPress plugin through 3.2.35 does not restrict which account attributes a visitor may set when registering through its front-end forms, allowing unauthenticated users to assign themselves an arb…
Products: Front End UsersCVEs: CVE-2026-87835