Privilege Escalation Vulnerability in User Frontend Plugin by WordPress
CVE-2026-75823
Currently unrated
Key Information:
- Vendor
WordPress
- Status
- Vendor
- CVE Published:
- 30 September 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-75823?
The User Frontend WordPress plugin, versions earlier than 4.3.12, is susceptible to a privilege escalation issue that allows unauthenticated users to manipulate the role assigned during the registration process. This vulnerability enables such users to sign up with elevated privileges, potentially gaining access to functionalities restricted to higher-level roles, such as Editor. This issue predominantly affects systems running a PHP build without the sodium extension, particularly when a registration page is set up.
Affected Version(s)
User Frontend 3.5.29 < 4.3.12
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.