CVE WATCH / VULNERABILITY DETAIL
CVE-2026-75823
HIGHCVSS 7.4NVD feed
Published 30 September 2026 · tracked since 30 September 2026
Description
The User Frontend WordPress plugin before 4.3.12 does not prevent tampering with the role assigned by its registration form, allowing unauthenticated users to register with a higher privileged role, such as Editor. This affects installations running a PHP build where the sodium extension is unavai
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog