Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration, with AI-generated Chinese analysis, references, and POCs.

Vendor: wedevs

CVE IDTitleCVSSSeverityPublished
CVE-2026-5127 User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Authenticated (Subscriber+) PHP Object Injection CWE-502 8.8 High2026-05-08
CVE-2026-2233 User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Missing Authorization to Unauthenticated Arbitrary Post Modification via 'post_id' Parameter CWE-862 5.3 Medium2026-03-15
CVE-2026-1565 User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Authenticated (Author+) Arbitrary File Upload CWE-434 8.8 High2026-02-26
CVE-2025-14047 WP User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion CWE-862 5.3 Medium2026-01-02

All 4 known CVE vulnerabilities affecting User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration with full Chinese analysis, references, and POCs where available.