CVE-2026-2233 | wedevs User Frontend Plugin up to 4.2.8 on WordPress draft_post post_id authorization

A vulnerability labeled as critical has been found in wedevs User Frontend Plugin up to 4.2.8 on WordPress. This issue affects the function draft_post. The manipulation of the argument post_id results in missing authorization.

This vulnerability is reported as CVE-2026-2233. The attack can be launched remotely. No exploit exists.