[ CVE-2026-75824 · Published 30 Sep 2026 ]
Vulnerability in Unknown User Frontend
CVSS 5.3
EPSS <1%No fix listed yet
[ Description ]Official description
The User Frontend WordPress plugin before 4.3.12 does not check whether the site allows user registration before creating an account, allowing unauthenticated users to create accounts on sites where registration is disabled. The created account receives the site's default role.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.