CVE-2026-75824 — WP User Frontend 2.5.8 - 4.3.11 - Unauthenticated Account Creation with Registration Disabled
The User Frontend WordPress plugin before 4.3.12 does not check whether the site allows user registration before creating an account, allowing unauthenticated users to create a…
Published: 2026-09-30 · CVSS: 5.3 · CVSS 3.1
The User Frontend WordPress plugin before 4.3.12 does not check whether the site allows user registration before creating an account, allowing unauthenticated users to create accounts on sites where registration is disabled. The created account receives the site's default role.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7