$PATCH CAsoon

Advisory feed · Saturday, 24 October 20264,531 CVEs published in the last 7 daysSource: saved copy of NVD from 24 Oct (NVD isn’t answering)Advisory feedDemo · pretend coins and SOL. The CVE records are real.

TLP:CLEARReceivedPublished 24 Oct 2026 · Updated 24 Oct 2026

CVE-2026-87835

·Not scored yetNo CVSS score yet

The Front End Users WordPress plugin through 3.2.35 does not restrict which account attributes a visitor may set when registering through its front-end forms, allowing unauthenticated users to assign themselves an arbitrary membership level and to mark their own account as approved, confirmed and paid, bypassing the Front End Users WordPress plugin through 3.2.35's content restrictions and its registration gating.

No CVSS vector yet. NVD or the CNA hasn’t scored this record.

Affected software: Front End Users
Versions: through 3.2.35
Weakness: Not stated
Assigned by: wpscan.com
NVD status: Received

ReferencesNVD https://nvd.nist.gov/vuln/detail/CVE-2026-87835 CVE.org https://www.cve.org/CVERecord?id=CVE-2026-87835 https://wpscan.com/vulnerability/9a761c19-1608-43f7-9ab3-f92f3fc0aadf/

The record above is NVD’s, word for word, as read before NVD finished its analysis. Coins say nothing about the flaw.

Launch a coin on CVE-2026-87835

Coins filed under CVE-2026-87835

No coins filed yet.

Be the first to file a coin under CVE-2026-87835.

File the first coin

CVE-2026-87835 · Patch Day