Known Vulnerabilities for WP User Frontend by WeDevs
Listed below are 2 of the newest known vulnerabilities associated with "WP User Frontend" by "WeDevs".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-56237 json | Capgo before 12.128.2 contains a broken authentication vulnerability in its API key generation mechanism. API keys are expose... | Not Provided | 2026-06-24 | 2026-06-24 |
| CVE-2026-53943 json | Ghost is a Node.js content management system. From until 6.37.0, when Ghost is behind a shared caching layer that results in... | Not Provided | 2026-06-24 | 2026-06-24 |
| CVE-2026-48946 json | The K2 frontend article-attachment upload path accepts files whose extension is `.php`, and Apache's standard mod_php matches... | Not Provided | 2026-06-25 | 2026-06-25 |
| CVE-2026-48944 json | The K2 frontend article-save handler accepts an `attachment[N][existing]` POST field that is concatenated with `JPATH_SITE/` ... | Not Provided | 2026-06-25 | 2026-06-25 |
| CVE-2026-48943 json | K2 ≤ 2.24 contains a mass-assignment defect in the K2 system user plugin `plg_user_k2`. A Registered Joomla user, by includ... | Not Provided | 2026-06-25 | 2026-06-25 |
| CVE-2026-46721 json | The create and edit flows do not restrict which user properties may be submitted and do not enforce access control on the fro... | Not Provided | 2026-05-19 | 2026-05-19 |
| CVE-2026-46552 json | NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, shared-base sessions were granted the same bas... | Not Provided | 2026-06-23 | 2026-06-24 |
| CVE-2026-46365 json | phpMyFAQ before 4.1.2 contains a missing authorization vulnerability in the DELETE /admin/api/content/tags/{tagId} endpoint t... | Not Provided | 2026-05-15 | 2026-05-28 |
| CVE-2026-45800 json | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.3, the... | Not Provided | 2026-05-15 | 2026-05-16 |
| CVE-2026-45622 json | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.3, the... | Not Provided | 2026-05-15 | 2026-05-15 |