CyberRota Analysis
AI-GeneratedThe User Frontend plugin for WordPress is susceptible to Insecure Direct Object Reference, allowing unauthenticated attackers to manipulate the 'user_id' parameter in the payment_page() function. This vulnerability enables attackers to activate free subscription packs for any user, potentially overwriting existing paid subscriptions and resulting in the loss of paid features. WordPress site administrators using this plugin should prioritize patching to mitigate the risk of unauthorized subscription changes.
Original NVD Description
The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.3.1 via the payment_page() function due to missing validation on the 'user_id' user controlled key. This makes it possible for unauthenticated attackers to activate a free subscription pack for any user on the site, overwriting their existing paid subscription and causing loss of paid features.