CVE-2026-75823
Received Received - Intake

Unauthenticated Role Escalation in User Frontend WordPress Plugin

Publication date: 2026-09-30

Last updated on: 2026-09-30

Assigner: WPScan

Description
The User Frontend WordPress plugin before 4.3.12 does not prevent tampering with the role assigned by its registration form, allowing unauthenticated users to register with a higher privileged role, such as Editor. This affects installations running a PHP build where the sodium extension is unavailable, and where a registration page has been configured. The administrator role cannot be obtained this way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-30
Last Modified
2026-09-30
Generated
2026-09-30
AI Q&A
2026-09-30
EPSS Evaluated
N/A
NVD
CVE-2026-75823
EUVD
EUVD-2026-89639

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
the_user_frontend the_user_frontend to 4.3.12 (exc)
wp_user_frontend wp_user_frontend to 4.3.12 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an unauthenticated privilege escalation issue in the User Frontend WordPress plugin versions 3.5.29 to 4.3.11. It allows unauthenticated users to register with elevated roles like Editor by tampering with the role assignment in the registration form. The flaw occurs when the PHP sodium extension is unavailable and a registration page is configured. The vulnerability has been fixed in version 4.3.12.

Detection Guidance

Check if the User Frontend WordPress plugin is installed and verify its version. If it is between 3.5.29 and 4.3.11, the system is vulnerable. Use commands like 'wp plugin list' in WordPress CLI or inspect the plugin files for version details.

Impact Analysis

This vulnerability allows attackers to gain unauthorized access to your WordPress site with elevated privileges, such as Editor. This could lead to unauthorized content creation, modification, or deletion. Since it does not allow Administrator role assignment, the impact is limited to non-administrative actions.

Compliance Impact

This vulnerability could lead to unauthorized access and modifications, potentially violating data integrity and confidentiality requirements under GDPR and HIPAA. Unauthorized role assignments may result in non-compliance with access control and audit logging requirements.

Mitigation Strategies

Update the User Frontend plugin to version 4.3.12 or later immediately. Disable user registration if not needed or restrict registration pages to prevent unauthorized role assignments.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-75823. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart