Beveiligingsadvies

CVE-2026-17563

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-02 14:16:46

Laatst bijgewerkt 2026-09-02 14:57:38

Toegewezen door WPScan

CVSS-score 5.3

Status PUBLISHED

Beschrijving

The User Frontend WordPress plugin before 4.3.11 does not enforce its subscription-purchase requirement when processing frontend post submissions, only when rendering the form, allowing unauthenticated users to create and, depending on the form's configuration, immediately publish posts through forms restricted to paying subscribers.

← Alle CVE's bekijken Bekijk op cve.org ↗