What the vulnerability does
01Description
The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'WPUF_Admin_Settings::check_filetype_and_ext' function and in the 'Admin_Tools::check_filetype_and_ext' function in all versions up to, and including, 4.2.8. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
Explanation of Vulnerability in Simple Terms
02Summary
User Frontend allows authenticated users to upload files without proper validation, enabling them to upload malicious files to the server. An attacker with a low-privilege account can upload executable code or other dangerous file types. This affects all versions up to 4.2.8. Update to a version newer than 4.2.8 to remediate.
What an attacker can do
03Attacker Capabilities
Upload malicious files (executables, scripts) to the server and potentially run code on the site.
Potential impact on your site
04Site Impact
Any registered user can upload dangerous files, risking site compromise, data theft, or malware distribution.
Conditions required to exploit
05Prerequisites
Attacker must have a low-privilege user account on the site; no user interaction required.
Key dates
06Disclosure timeline
February 26, 2026
CVE published
April 8, 2026
Record updated
