A flaw in the WordPress WP User Frontend plugin allows an authorizer bypass that permits a user with the Subscriber role or other unauthorized accounts to invoke actions reserved for higher-privileged members. The vulnerability arises because the plugin does not enforce role-based access checks, enabling the attacker to execute restricted endpoints. In practice this could let an attacker read or modify content, upload files, or otherwise misuse the site’s functionality, thereby compromising confidentiality, integrity, and availability.

All WordPress sites running the weDevs WP User Frontend plugin version 4.3.11 or older are affected. The flaw does not exist in versions 4.3.12 and later.

The CVSS score of 6.5 classifies the issue as medium severity. EPSS is not available, so the likelihood of exploitation is unknown, and the vulnerability is not listed in CISA KEV. According to the vendor’s advisory, the flaw can be triggered through the public web interface; an attacker only needs a normal user session or a Subscriber role to exploit the bypass. The path therefore supports remote exploitation via the website’s plugin functionality.