Threats tagged 'ghsa-wm3r-9xmv-rff3'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.2%	CVE-2026-75824The User Frontend WordPress plugin before 4.3.12 does not check whether the site allows user registration before Medium5.3EPSS 0.2%2026-09-30GCVE DatabaseCVE-2026-75824 The User Frontend WordPress plugin versions prior to 4.3.12 allow unauthenticated users to create accounts even when site registration is disabled. This occurs because the plugin does not verify if user registration is permitted before account creation. Accounts created this way receive the site's default user role. EPSS 0.2%Report on CVE-2026-75824 Vulnerability CWE-284 #ghsa-wm3r-9xmv-rff3	GCVE Database	2026-09-30

Page 1 of 1