CVE-2026-95524

Unauthenticated Bypass Vulnerability in WP User Frontend <= 4.3.11 versions.

• Published Sep 23, 2026
• CVSS 5.3 medium
• 0.2% chance of exploitation in the next 30 days (EPSS)

CVE-2026-95524 at the National Vulnerability Database