CVE-2026-87835
SSVC: noneFront End Users <= 3.2.35 - Unauthenticated Membership Level and Account Status Self-Assignment
Fetching some sources has been requested. Reload in about a minute to see them.
CVSS v3.1 (listed by NVD)
6.5
MEDIUM
Scored by CISA-ADP (not yet scored by NVD)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0 (listed by NVD)
—
Not scored
CVSS (listed by CVE.org)
—
Not scored
EPSS exploit probability
0.2%
Percentile 9.0%
as of 2026-10-24
CISA KEV
—
Not listed
SSVC (CISA ADP)
none
Automatable: yes / Impact: partial
Attack conditions and impact
Derived from the CISA-ADP (via NVD) CVSS 3.1 vector
NetworkNo authNo interaction
Confidentiality LIntegrity LAvailability N
This vulnerability may be exploitable over the internet without authentication or user interaction.
| Metric | Value | Meaning |
|---|---|---|
| Attack vector AV | N | Network |
| Attack complexity AC | L | Low (easy) |
| Privileges required PR | N | None |
| User interaction UI | N | None |
| Scope S | U | Unchanged |
| Confidentiality C | L | Low |
| Integrity I | L | Low |
| Availability A | N | None |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Description
NVD
The Front End Users WordPress plugin through 3.2.35 does not restrict which account attributes a visitor may set when registering through its front-end forms, allowing unauthenticated users to assign themselves an arbitrary membership level and to mark their own account as approved, confirmed and paid, bypassing the Front End Users WordPress plugin through 3.2.35's content restrictions and its registration gating.
CVSS assessments
| Provider | Version | Score | Vector |
|---|---|---|---|
| NVD / 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary) | 3.1 | 6.5 MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N |
| ADP / CISA-ADP | 3.1 | 6.5 MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N |
Affected products and packages
CNA (CVE.org)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | Front End Users | affected: 0 … <= 3.2.35 default: unknown |
Linux distribution status
References (1)
- https://wpscan.com/vulnerability/9a761c19-1608-43f7-9ab3-f92f3fc0aadf/ NVD, CNA exploitvdb-entrytechnical-description