CVE Watch8 jul 2026

CVE-2026-5459

The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable t

CVSS

5.3

Medio

EPSS

0.2%

KEV

—

Exploit Today

0-100

Publicado: 8 jul 2026 · Última mod.: 8 jul 2026 · CWE-639

EPSS · 30d

0.2%EPSS · 30 días0.2%

2026-07-092026-07-17

Descripción técnica

The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.3.1 via the payment_page() function due to missing validation on the 'user_id' user controlled key. This makes it possible for unauthenticated attackers to activate a free subscription pack for any user on the site, overwriting their existing paid subscription and causing loss of paid features.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-552558.4 ALT

42.8%

KEV—63Langflow Authorization Bypass Through User-Controlled Key Vulnerability10d CVE-2021-464168.1 ALT

89.9%

——27Insecure direct object reference in SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R leads to unauthorized user groups accessing due to insecure cookie handling.4d CVE-2022-289867.5 ALT

80.8%

——24LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object references (IDOR) vulnerability, which allows remote attackers to update sensitive records such as email, password and phone number of other user accounts.9d CVE-2020-234465.3 MED

65.5%

——20Verint Workforce Optimization suite 15.1 (15.1.0.37634) has Unauthenticated Information Disclosure via API9d CVE-2021-33806.5 MED

61.5%

——18Insecure direct object reference (IDOR) vulnerability in ICREM H8 SSRMS allows attackers to disclose sensitive information via the Print Invoice Functionality.9d CVE-2022-362029.8 CRÍ

51.5%

——15Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient/settings.php. The settings.php is affected by Broken Access Control (IDOR) via id= parameter.9d