SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-81283

HIGH · CVSS 8.8 EPSS 0.48%

Source: NVD + CISA KEV + EPSS · Published 2026-09-02 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The vulnerability affects WP User Frontend versions up to 4.3.10, allowing for PHP Object Injection through improper handling of user input. This can lead to remote code execution, potentially compromising the integrity and confidentiality of the affected systems. Organizations using this plugin should prioritize patching or upgrading to mitigate the risk of exploitation.

CVE
CVE-2026-81283
Severity
HIGH
CVSS
8.8
EPSS
0.48%

Original NVD Description

Subscriber PHP Object Injection in WP User Frontend <= 4.3.10 versions.