Pricing
Case studies
Login
Start trial
WP User Frontend
Tareq Hasan
Developer
4.2.4
Latest version
20,000
Installations
No date
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
11 fixed
4 Mitigation rules
Broken Access Control Vulnerability
<= 4.1.12
Sep 22, 2025
Content Injection Vulnerability
<= 4.1.12
Sep 22, 2025
SQL Injection vulnerability
<= 4.0.7
Aug 1, 2024
Malicious Polyfill.io Embed vulnerability
<= 4.0.7
Jul 3, 2024
Authenticated Privilege Escalation vulnerability
<= 3.6.5
Nov 9, 2023
Broken Access Control vulnerability
<= 3.6.8
Oct 3, 2023
Cross-Site Request Forgery (CSRF) vulnerability
<= 3.6.0
Mar 21, 2023
Obscure Registration as Admin vulnerability
<= 3.5.28
Oct 31, 2022
SQL Injection (SQLi) to Reflected Cross-Site Scripting (XSS)
<= 3.5.25
Dec 27, 2021
SQL Injection (SQLi) vulnerability
<= 3.5.23
Nov 18, 2021
Unrestricted File Upload
<= 2.3.10
Feb 8, 2016