front_end_users vulnerabilities

CVEs whose affected-version data names the front_end_users package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-87835None

today

Front End Users <= 3.2.35 - Unauthenticated Membership Level and Account Status Self-Assignment

The Front End Users WordPress plugin through 3.2.35 does not restrict which account attributes a visitor may set when registering through its front-end forms, allowing unauthenticated users to assign themselves an arbitrary membership le…

▾ Sunlitvia CVEORG