CVE-2026-120070 | wedevs User Frontend Plugin up to 4.3.13 on WordPress Shortcode submit_post post_content privileges management

October 31, 2026 Yanac

A vulnerability described as critical has been identified in wedevs User Frontend Plugin up to 4.3.13 on WordPress. Affected by this issue is the function submit_post of the component Shortcode Handler. Such manipulation of the argument post_content leads to improper privilege management.

This vulnerability is listed as CVE-2026-120070. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More