Product by weDevs

    User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction With Frontend Post Submission

    4 known vulnerabilities in User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction With Frontend Post Submission (weDevs), 0 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction With Frontend Post Submission (weDevs)
    HighCVE-2026-120070

    Improper Privilege Management (CVE-2026-120070)

    		8.8
    HighCVE-2026-109214

    User Frontend <= 4.3.13 - Unauthenticated Stored Cross-Site Scripting via Taxonomy Field Text-Input

    		7.2
    MediumCVE-2026-96574

    Cross-site Scripting (CVE-2026-96574)

    		6.4
    MediumCVE-2026-103962

    User Frontend <= 4.3.13 - Reflected Cross-Site Scripting via 'field_attr[required]' Parameter

    		6.1

    All products by weDevs