Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

WordPress Plugin 'WP User Frontend' Allows Unauthorized Account Access

MINI-r869-5chc-65rf
Summary

A security issue affects the WP User Frontend plugin for WordPress. This plugin allows users to create and manage user accounts, but a flaw lets attackers create new accounts without a password, potentially giving them full access to the website. Website owners should update the plugin to the latest version to prevent unauthorized account creation.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software
VendorProductAffected versionsFix available
apache-tika-3.0 All versions
apache-tika-3.0-compat All versions
Original title
MINI-r869-5chc-65rf
Published: 9 Mar 2026 · Updated: 13 Mar 2026 · First seen: 9 Mar 2026