CVE-2026-115277
Received Received - Intake

Reflected XSS in User Frontend WordPress Plugin

Publication date: 2026-10-30

Last updated on: 2026-10-30

Assigner: WPScan

Description
The User Frontend WordPress plugin before 4.3.14 does not sanitise and escape some user-supplied values before reflecting them into HTML attributes in a publicly reachable AJAX response, leading to Reflected Cross-Site Scripting. The affected action is gated by an anonymous nonce that only validates for logged-out requests, so the payload executes against logged-out visitors rather than authenticated users.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-30
Last Modified
2026-10-30
Generated
2026-10-30
AI Q&A
2026-10-30
EPSS Evaluated
N/A
NVD
CVE-2026-115277
EUVD
EUVD-2026-113725

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Unknown User Frontend 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Reflected Cross-Site Scripting (XSS) vulnerability in the User Frontend WordPress plugin before version 4.3.14. It occurs because the plugin does not properly sanitize or escape user-supplied values before reflecting them into HTML attributes in a publicly accessible AJAX response. The vulnerability is triggered by an anonymous nonce that only validates requests from logged-out users, meaning it affects visitors who are not logged in.

Impact Analysis

An attacker could exploit this vulnerability to inject malicious scripts into web pages viewed by logged-out visitors. This could lead to theft of session cookies, defacement of the website, or redirection to malicious sites. Since the exploit targets non-logged-in users, it primarily affects visitors rather than authenticated users or administrators.

Compliance Impact

This vulnerability could lead to unauthorized access to user data, which may violate GDPR's data protection requirements or HIPAA's safeguards for protected health information. If exploited, it could result in data breaches, triggering compliance violations and potential legal penalties for organizations handling sensitive user data.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-115277. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart