CVE-2026-95525

Subscriber Arbitrary File Deletion in WP User Frontend <= 4.3.11 versions.

• Published Sep 23, 2026
• CVSS 6.5 medium
• 0.5% chance of exploitation in the next 30 days (EPSS)

CVE-2026-95525 at the National Vulnerability Database