CyberRota Analysis
AI-GeneratedThe User Frontend plugin for WordPress versions prior to 4.3.8 is vulnerable to unauthorized deletion of attachments due to improper ownership verification. This flaw allows unauthenticated attackers to permanently delete attachments, including guest uploads and placeholder media, potentially disrupting user content and site functionality. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration WordPress plugin before 4.3.8 does not correctly verify ownership before deleting an attachment, allowing unauthenticated attackers to permanently delete author-less attachments such as guest uploads and User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration WordPress plugin before 4.3.8-installed placeholder media.