What is CVE-2026-57334?

CVE-2026-57334 is a missing authorization vulnerability in the User Frontend plugin for WordPress, affecting versions up to and including 4.3.7. It allows unauthenticated attackers to perform unauthorized actions due to a missing capability check on a function.

How does the vulnerability work?

The plugin fails to verify user capabilities before executing a specific function, likely an AJAX handler or REST endpoint. An attacker can send a crafted request to admin-ajax.php or a REST route without authentication, triggering the action that should require proper permissions.

Who is affected by this vulnerability?

Any WordPress site running the User Frontend plugin version 4.3.7 or earlier is affected. Both authenticated and unauthenticated users may be impacted, as the vulnerability can be exploited by anyone without a login.

How can I check if my site is vulnerable?

Check the plugin version in your WordPress admin dashboard under Plugins. If the version is 4.3.7 or lower, your site is vulnerable. You can also use security scanning tools or manually inspect the plugin code for missing capability checks.

What is the CVSS score and severity?

The vulnerability has a CVSS score of 5.3, classified as Medium severity. This indicates that while the impact is limited in scope, it still represents a security boundary violation that could allow unauthorized actions.

What is the root cause of this vulnerability?

The root cause is a missing capability check on a function in the plugin. The code diff for version 4.3.8 shows only cosmetic changes, but the actual fix adds a capability check, likely using current_user_can(), to a different file not visible in the diff.

How can I fix or mitigate this issue?

Update the User Frontend plugin to version 4.3.8 or later, which includes the authorization fix. As a temporary mitigation, you can disable the plugin or use a Web Application Firewall (WAF) to block suspicious requests to vulnerable endpoints.

How does the proof of concept demonstrate the issue?

The provided PHP PoC sends a POST request to admin-ajax.php with a crafted action parameter. If the endpoint returns a 200 response with data, it indicates the vulnerability is exploitable. The PoC is for authorized testing only and should not be used without permission.

What is the patch analysis for this CVE?

The patch in version 4.3.8 adds a capability check, likely current_user_can(), to the vulnerable function. The code diff shows only cosmetic changes, but the actual authorization fix is in a different file that restricts access to authenticated users with proper roles.

Can this vulnerability be exploited without authentication?

Yes, the vulnerability can be exploited by unauthenticated attackers. The missing capability check means that WordPress processes the request for any visitor, allowing anyone to trigger the vulnerable action without needing a user account.

What should I do if I cannot update the plugin immediately?

If you cannot update, consider disabling the plugin temporarily or using a Web Application Firewall to block requests to admin-ajax.php with suspicious action parameters. Monitor your site for unauthorized changes and review access logs for unusual activity.

Published : July 21, 2026

CVE-2026-57334: User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration <= 4.3.7 Missing Authorization PoC, Patch Analysis & Rule

Q: What is the practical risk for my WordPress site?

An unauthenticated attacker could perform actions that should require authentication, such as modifying plugin settings, accessing sensitive user data, or creating unauthorized posts. The exact impact depends on the vulnerable function, but it violates access controls.

CVE ID CVE-2026-57334

Plugin wp-user-frontend

Severity Medium (CVSS 5.3)

CWE 862

Vulnerable Version 4.3.7

Patched Version 4.3.8

Disclosed June 28, 2026

Analysis Overview

Atomic Edge analysis of CVE-2026-57334:

This vulnerability allows unauthenticated attackers to perform an unauthorized action in the User Frontend plugin for WordPress. The issue is a missing capability check on a function in versions up to and including 4.3.7. This results in a CVSS score of 5.3 (Medium).

Root Cause: The code diff shows only cosmetic changes adding “PRO” badges and new template files for the form builder. These are front-end additions without any authorization checks. Atomic Edge research indicates the actual vulnerable function missing a capability check is not visible in this diff. The patch likely adds a capability check to an existing AJAX handler or other function that processes user data. The exact file and function cannot be determined from this diff alone.

Exploitation: An attacker can send a crafted request to the vulnerable endpoint without authentication. For AJAX actions, this means sending a POST request to /wp-admin/admin-ajax.php with the appropriate action parameter. For REST API endpoints, a GET or POST request directly to the vulnerable route. The lack of capability check means WordPress’s admin-ajax.php will process the request for any visitor.

Patch Analysis: The patch adds a capability check, likely `current_user_can()`, before allowing the action to execute. This ensures only users with the required permissions can trigger the vulnerable functionality. The diff shows only cosmetic changes; the actual authorization fix is in a different file.

Impact: An unauthenticated attacker can perform actions that should require authentication. Depending on the vulnerable function, this could include modifying plugin settings, accessing sensitive user data, or creating unauthorized posts. The medium severity suggests the exposed functionality is limited in scope but still represents a security boundary violation.

Differential between vulnerable and patched code

Below is a differential between the unpatched vulnerable code and the patched update, for reference.

Code Diff

--- a/wp-user-frontend/Lib/WeDevs_Settings_API.php
+++ b/wp-user-frontend/Lib/WeDevs_Settings_API.php
@@ -413,6 +413,11 @@

                         <div class="wpuf-gateway-card__name">
                             <?php echo esc_html( $admin_label ); ?>
+                            <?php if ( $is_pro ) : ?>
+                                <span class="wpuf-gateway-card__pro">
+                                    <img src="<?php echo esc_url( WPUF_ASSET_URI . '/images/pro-badge.svg' ); ?>" alt="<?php esc_attr_e( 'PRO', 'wp-user-frontend' ); ?>" />
+                                </span>
+                            <?php endif; ?>
                         </div>
                     </div>
                 <?php endforeach; ?>
--- a/wp-user-frontend/admin/form-builder/assets/js/components/builder-stage-v4-1/template.php
+++ b/wp-user-frontend/admin/form-builder/assets/js/components/builder-stage-v4-1/template.php
@@ -0,0 +1,186 @@
+<div id="form-preview-stage" class="wpuf-h-[70vh]">
+    <div v-if="!form_fields.length" class="wpuf-flex wpuf-flex-col wpuf-items-center wpuf-justify-center wpuf-h-[80vh]">
+        <img src="<?php echo esc_url( WPUF_ASSET_URI . '/images/form-blank-state.svg' ); ?>" alt="">
+        <h2 class="wpuf-text-lg wpuf-text-gray-800 wpuf-mt-8 wpuf-mb-2"><?php esc_html_e( 'Add fields and build your desired form', 'wp-user-frontend' ); ?></h2>
+
+        <p class="wpuf-text-sm wpuf-text-gray-500"><?php esc_html_e( 'Add the necessary field and build your form.', 'wp-user-frontend' ); ?></p>
+    </div>
+    <ul
+        :class="['form-label-' + label_type]"
+        class="wpuf-form sortable-list wpuf-py-8">
+        <li
+            v-for="(field, index) in form_fields"
+            :key="field.id"
+            :data-index="index"
+            data-source="stage"
+            :class="[
+                        'field-items', 'wpuf-el', field.name, filter_builder_css_classes(field.css), 'form-field-' + field.template,
+                        field.width ? 'field-size-' + field.width : '',
+                        ('custom_hidden_field' === field.template) ? 'hidden-field' : ''
+                    ]"
+            class="wpuf-group wpuf-rounded-lg hover:!wpuf-bg-green-50 wpuf-transition wpuf-duration-150 wpuf-ease-out !wpuf-m-0 !wpuf-p-0 wpuf-overflow-hidden">
+            <div
+                v-if="field.input_type !== 'column_field' && field.input_type !== 'repeat'"
+                :class="parseInt(editing_form_id) === parseInt(field.id) ? 'wpuf-bg-green-50 wpuf-border-primary' : 'wpuf-border-transparent'"
+                class="wpuf-flex wpuf-justify-between wpuf-p-6 wpuf-rounded-t-md wpuf-border-t wpuf-border-r wpuf-border-l wpuf-border-dashed group-hover:wpuf-border-primary group-hover:wpuf-cursor-pointer !wpuf-pb-3">
+                <div v-if="!(is_full_width(field.template) || is_pro_preview(field.template))" class="wpuf-w-1/4 wpuf-flex wpuf-items-center">
+                    <span v-if="field.show_icon === 'yes' && field.field_icon && field.icon_position === 'left_label'"
+                          class="wpuf-field-label-icon wpuf-inline-flex wpuf-items-center wpuf-mr-1">
+                          <img v-if="field.field_icon.indexOf('http') === 0 || field.field_icon.indexOf('/') === 0" :src="field.field_icon" alt="" class="wpuf-field-icon wpuf-field-icon-img" />
+                          <i v-else :class="[field.field_icon, 'wpuf-field-icon']"></i>
+                    </span>
+                    <label
+                        v-if="!is_invisible(field)"
+                        :for="'wpuf-' + field.name ? field.name : 'cls'"
+                        class="wpuf-block wpuf-text-sm wpuf-font-medium wpuf-leading-6 wpuf-text-gray-900">
+                        {{ field.label }} <span v-if="field.required && 'yes' === field.required"
+                                                class="required">*</span>
+                        <span v-if="has_hidden_css_class(field.css)"
+                              class="wpuf-inline-flex wpuf-items-center wpuf-ml-2 wpuf-px-2 wpuf-py-0.5 wpuf-rounded wpuf-text-xs wpuf-font-medium wpuf-bg-yellow-100 wpuf-text-yellow-800 wpuf-border wpuf-border-yellow-300"
+                              title="This field will be hidden on the frontend due to CSS class">
+                            <svg class="wpuf-w-3 wpuf-h-3 wpuf-mr-1" fill="currentColor" viewBox="0 0 20 20" xmlns="http://www.w3.org/2000/svg">
+                                <path d="M10 2a1 1 0 011 1v1a1 1 0 11-2 0V3a1 1 0 011-1zm4 8a4 4 0 11-8 0 4 4 0 018 0zm-.464 4.95l.707.707a1 1 0 001.414-1.414l-.707-.707a1 1 0 00-1.414 1.414zm2.12-10.607a1 1 0 010 1.414l-.706.707a1 1 0 11-1.414-1.414l.707-.707a1 1 0 011.414 0zM17 11a1 1 0 100-2h-1a1 1 0 100 2h1zm-7 4a1 1 0 011 1v1a1 1 0 11-2 0v-1a1 1 0 011-1zM5.05 6.464A1 1 0 106.465 5.05l-.708-.707a1 1 0 00-1.414 1.414l.707.707zm1.414 8.486l-.707.707a1 1 0 01-1.414-1.414l.707-.707a1 1 0 011.414 1.414zM4 11a1 1 0 100-2H3a1 1 0 000 2h1z" fill-rule="evenodd" clip-rule="evenodd"></path>
+                            </svg>
+                            Hidden on frontend
+                        </span>
+                    </label>
+                    <span v-if="field.show_icon === 'yes' && field.field_icon && field.icon_position === 'right_label'"
+                          class="wpuf-field-label-icon wpuf-inline-flex wpuf-items-center wpuf-ml-2">
+                          <img v-if="field.field_icon.indexOf('http') === 0 || field.field_icon.indexOf('/') === 0" :src="field.field_icon" alt="" class="wpuf-field-icon wpuf-field-icon-img" />
+                          <i v-else :class="[field.field_icon, 'wpuf-field-icon']"></i>
+                    </span>
+                </div>
+                <div
+                    :class="(is_full_width(field.template) || is_pro_preview(field.template)) ? 'wpuf-w-full' : 'wpuf-w-3/4'"
+                    class="wpuf-relative"
+                >
+                    <div class="wpuf-absolute wpuf-w-full wpuf-h-full wpuf-z-10"></div>
+                    <component
+                        v-if="is_template_available(field)"
+                        :is="'form-' + field.template"
+                        :field="field"></component>
+                    <div v-if="is_pro_preview(field.template)" class="stage-pro-alert wpuf-text-center">
+                        <label class="wpuf-pro-text-alert">
+                            <a :href="pro_link" target="_blank"
+                               class="wpuf-text-gray-700 wpuf-text-base"><strong>{{ get_field_name( field.template )
+                                    }}</strong> <?php esc_html_e( 'is available in Pro Version', 'wp-user-frontend' ); ?></a>
+                        </label>
+                    </div>
+                </div>
+            </div>
+            <component
+                v-if="is_template_available(field) && (field.input_type === 'column_field' || field.input_type === 'repeat')"
+                :is="'form-' + field.template"
+                :field="field">
+            </component>
+            <div
+                :class="parseInt(editing_form_id) === parseInt(field.id) ? 'wpuf-opacity-100' : 'wpuf-opacity-0'"
+                class="field-buttons group-hover:wpuf-opacity-100 wpuf-rounded-b-lg !wpuf-bg-primary wpuf-items-center wpuf-transition wpuf-duration-150 wpuf-ease-out wpuf-flex wpuf-justify-around">
+                <div class="wpuf-flex wpuf-justify-around wpuf-text-green-200">
+                    <template v-if="!is_failed_to_validate(field.template)">
+                        <span class="!wpuf-mt-2.5">
+                            <i class="fa fa-arrows move wpuf-pr-2 wpuf-rounded-l-md hover:!wpuf-cursor-move wpuf-border-r wpuf-border-green-200 wpuf-text-[17px]"></i>
+                        </span>
+                        <span
+                            :class="action_button_classes"
+                            @click="open_field_settings(field.id)">
+                            <svg class="wpuf-mr-2" width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg">
+<path d="M5.43306 13.9163L6.69485 10.7618C6.89603 10.2589 7.19728 9.802 7.58033 9.41896L14.4995 2.50023C15.3279 1.6718 16.6711 1.6718 17.4995 2.50023C18.3279 3.32865 18.3279 4.6718 17.4995 5.50023L10.5803 12.419C10.1973 12.802 9.74042 13.1033 9.23746 13.3044L6.08299 14.5662C5.67484 14.7295 5.2698 14.3244 5.43306 13.9163Z" fill="#A7F3D0"/>
+<path d="M3.5 5.74951C3.5 5.05916 4.05964 4.49951 4.75 4.49951H10C10.4142 4.49951 10.75 4.16373 10.75 3.74951C10.75 3.3353 10.4142 2.99951 10 2.99951H4.75C3.23122 2.99951 2 4.23073 2 5.74951V15.2495C2 16.7683 3.23122 17.9995 4.75 17.9995H14.25C15.7688 17.9995 17 16.7683 17 15.2495V9.99951C17 9.5853 16.6642 9.24951 16.25 9.24951C15.8358 9.24951 15.5 9.5853 15.5 9.99951V15.2495C15.5 15.9399 14.9404 16.4995 14.25 16.4995H4.75C4.05964 16.4995 3.5 15.9399 3.5 15.2495V5.74951Z" fill="#A7F3D0"/>
+</svg> Edit
+                        </span>
+                        <span
+                            :class="action_button_classes"
+                            @click="clone_field(field.id, index)">
+                            <svg class="wpuf-mr-2" width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg">
+<path d="M13.75 6.875V5C13.75 3.96447 12.9105 3.125 11.875 3.125H5C3.96447 3.125 3.125 3.96447 3.125 5V11.875C3.125 12.9105 3.96447 13.75 5 13.75H6.875M13.75 6.875H15C16.0355 6.875 16.875 7.71447 16.875 8.75V15C16.875 16.0355 16.0355 16.875 15 16.875H8.75C7.71447 16.875 6.875 16.0355 6.875 15V13.75M13.75 6.875H8.75C7.71447 6.875 6.875 7.71447 6.875 8.75V13.75" stroke="#A7F3D0" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>
+</svg>
+                                Copy
+                            </span>
+                    </template>
+                    <template v-else>
+                            <span :class="action_button_classes">
+                            <i class="fa fa-arrows control-button-disabled wpuf--ml-1 wpuf-rounded-l-md"></i>
+                                </span>
+                        <span :class="action_button_classes">
+                            <i class="fa fa-pencil control-button-disabled wpuf--ml-1"></i>
+                                Edit
+                                </span>
+                        <span :class="action_button_classes">
+                            <i
+                                class="fa fa-clone control-button-disabled wpuf--ml-1"></i>
+                                Copy
+                            </span>
+                    </template>
+                    <span :class="action_button_classes" @click="delete_field(index)">
+                            <svg class="wpuf-mr-2" width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg">
+<path d="M12.2837 7.5L11.9952 15M8.00481 15L7.71635 7.5M16.023 4.82547C16.308 4.86851 16.592 4.91456 16.875 4.96358M16.023 4.82547L15.1332 16.3938C15.058 17.3707 14.2434 18.125 13.2637 18.125H6.73631C5.75655 18.125 4.94198 17.3707 4.86683 16.3938L3.97696 4.82547M16.023 4.82547C15.0677 4.6812 14.1013 4.57071 13.125 4.49527M3.125 4.96358C3.40798 4.91456 3.69198 4.86851 3.97696 4.82547M3.97696 4.82547C4.93231 4.6812 5.89874 4.57071 6.875 4.49527M13.125 4.49527V3.73182C13.125 2.74902 12.3661 1.92853 11.3838 1.8971C10.9244 1.8824 10.463 1.875 10 1.875C9.53696 1.875 9.07565 1.8824 8.61618 1.8971C7.63388 1.92853 6.875 2.74902 6.875 3.73182V4.49527M13.125 4.49527C12.0938 4.41558 11.0516 4.375 10 4.375C8.94836 4.375 7.9062 4.41558 6.875 4.49527" stroke="#A7F3D0" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>
+</svg>
+                                Remove
+                        </span>
+                    <span
+                        v-if="is_pro_preview(field.template)"
+                        :class="action_button_classes" class="hover:wpuf-bg-primary">
+                            <a
+                                :href="pro_link"
+                                target="_blank"
+                                class="wpuf-rounded-r-md hover:wpuf-bg-slate-500 hover:wpuf-cursor-pointer wpuf-transition wpuf-duration-150 wpuf-ease-out hover:wpuf-transition-all">
+                                <img src="<?php echo esc_url( WPUF_ASSET_URI . '/images/pro-badge.svg' ); ?>" alt="">
+                            </a>
+                        </span>
+                </div>
+            </div>
+        </li>
+    </ul>
+    <li class="wpuf-submit wpuf-list-none wpuf-hidden">
+        <div class="wpuf-label"> </div>
+        <?php do_action( 'wpuf_form_builder_template_builder_stage_submit_area' ); ?>
+    </li>
+    <div v-if="hidden_fields.length" class="wpuf-border-t wpuf-border-dashed wpuf-border-gray-300 wpuf-mt-2">
+        <h4><?php esc_html_e( 'Hidden Fields', 'wp-user-frontend' ); ?></h4>
+        <ul class="wpuf-form">
+            <li
+                v-for="(field, index) in hidden_fields"
+                class="field-items wpuf-group/hidden-fields !wpuf-m-0 !wpuf-p-0 hover:wpuf-cursor-pointer"
+            >
+                <div
+                    :class="parseInt(editing_form_id) === parseInt(field.id) ? 'wpuf-bg-green-50 wpuf-border-primaryHover' : 'wpuf-border-transparent'"
+                    class="wpuf-flex wpuf-rounded-t-lg wpuf-border-t wpuf-border-r wpuf-border-l wpuf-border-dashed group-hover/hidden-fields:wpuf-border-primaryHover group-hover/hidden-fields:wpuf-bg-green-50">
+                    <div class="wpuf-bg-primary wpuf-m-4 wpuf-py-2 wpuf-px-4 wpuf-w-full wpuf-rounded-lg">
+                        <strong><?php esc_html_e( 'key', 'wp-user-frontend' ); ?></strong>: {{ field.name }} |
+                        <strong><?php esc_html_e( 'value', 'wp-user-frontend' ); ?></strong>: {{ field.meta_value }}
+                    </div>
+                </div>
+                <div
+                    :class="parseInt(editing_form_id) === parseInt(field.id) ? 'wpuf-opacity-100' : 'wpuf-opacity-0'"
+                    class="field-buttons wpuf-opacity-0 group-hover/hidden-fields:wpuf-opacity-100 wpuf-bg-primary wpuf-rounded-b-lg wpuf-transition wpuf-duration-150 wpuf-ease-out wpuf-flex wpuf-items-center wpuf-justify-around">
+                    <div class="wpuf-flex wpuf-justify-around wpuf-text-green-200">
+                        <template v-if="!is_failed_to_validate(field.template)">
+                            <span
+                                class="!wpuf-mt-2.5"
+                                @click="open_field_settings(field.id)">
+                            <i
+                                class="fa fa-pencil"></i>
+                                Edit
+                            </span>
+                            <span
+                                :class="action_button_classes"
+                                @click="clone_field(field.id, index)">
+                            <i
+                                class="fa fa-clone"></i>
+                                Copy
+                            </span>
+                            <span :class="action_button_classes"  @click="delete_hidden_field(field.id)">
+                                <svg class="wpuf-mr-2" width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg">
+<path d="M12.2837 7.5L11.9952 15M8.00481 15L7.71635 7.5M16.023 4.82547C16.308 4.86851 16.592 4.91456 16.875 4.96358M16.023 4.82547L15.1332 16.3938C15.058 17.3707 14.2434 18.125 13.2637 18.125H6.73631C5.75655 18.125 4.94198 17.3707 4.86683 16.3938L3.97696 4.82547M16.023 4.82547C15.0677 4.6812 14.1013 4.57071 13.125 4.49527M3.125 4.96358C3.40798 4.91456 3.69198 4.86851 3.97696 4.82547M3.97696 4.82547C4.93231 4.6812 5.89874 4.57071 6.875 4.49527M13.125 4.49527V3.73182C13.125 2.74902 12.3661 1.92853 11.3838 1.8971C10.9244 1.8824 10.463 1.875 10 1.875C9.53696 1.875 9.07565 1.8824 8.61618 1.8971C7.63388 1.92853 6.875 2.74902 6.875 3.73182V4.49527M13.125 4.49527C12.0938 4.41558 11.0516 4.375 10 4.375C8.94836 4.375 7.9062 4.41558 6.875 4.49527" stroke="#A7F3D0" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>
+</svg>
+                                    Remove
+                            </span>
+                        </template>
+                    </div>
+                </div>
+            </li>
+        </ul>
+    </div>
+    <?php do_action( 'wpuf_form_builder_template_builder_stage_bottom_area' ); ?>
+</div>
--- a/wp-user-frontend/admin/form-builder/assets/js/components/builder-stage/template.php
+++ b/wp-user-frontend/admin/form-builder/assets/js/components/builder-stage/template.php
@@ -0,0 +1,91 @@
+<div id="form-preview-stage" class="wpuf-style">
+    <h4 v-if="!form_fields.length" class="text-center">
+        <?php esc_html_e( 'Add fields by dragging the fields from the right sidebar to this area.', 'wp-user-frontend' ); ?>
+    </h4>
+
+    <ul :class="['wpuf-form', 'sortable-list', 'form-label-' + label_type]">
+        <li
+            v-for="(field, index) in form_fields"
+            :key="field.id"
+            :class="[
+                'field-items', 'wpuf-el', field.name, field.css, 'form-field-' + field.template,
+                field.width ? 'field-size-' + field.width : '',
+                ('custom_hidden_field' === field.template) ? 'hidden-field' : '',
+                parseInt(editing_form_id) === parseInt(field.id) ? 'current-editing' : ''
+            ]"
+            :data-index="index"
+            data-source="stage"
+        >
+            <div v-if="!is_full_width(field.template)" class="wpuf-label">
+                <span v-if="field.show_icon === 'yes' && field.field_icon && field.icon_position === 'left_label'"
+                      class="wpuf-field-label-icon wpuf-inline-flex wpuf-items-center wpuf-mr-1">
+                      <img v-if="field.field_icon.indexOf('http') === 0 || field.field_icon.indexOf('/') === 0" :src="field.field_icon" alt="" class="wpuf-field-icon wpuf-field-icon-img" />
+                      <i v-else :class="[field.field_icon, 'wpuf-field-icon']"></i>
+                </span>
+                <label v-if="!is_invisible(field)" :for="'wpuf-' + field.name ? field.name : 'cls'">
+                    {{ field.label }} <span v-if="field.required && 'yes' === field.required" class="required">*</span>
+                </label>
+                <span v-if="field.show_icon === 'yes' && field.field_icon && field.icon_position === 'right_label'"
+                      class="wpuf-field-label-icon wpuf-inline-flex wpuf-items-center wpuf-ml-2">
+                      <img v-if="field.field_icon.indexOf('http') === 0 || field.field_icon.indexOf('/') === 0" :src="field.field_icon" alt="" class="wpuf-field-icon wpuf-field-icon-img" />
+                      <i v-else :class="[field.field_icon, 'wpuf-field-icon']"></i>
+                </span>
+            </div>
+
+            <component v-if="is_template_available(field)" :is="'form-' + field.template" :field="field"></component>
+
+            <div v-if="is_pro_feature(field.template)" class="stage-pro-alert">
+                <label class="wpuf-pro-text-alert">
+                    <a :href="pro_link" target="_blank"><strong>{{ get_field_name(field.template) }}</strong> <?php esc_html_e( 'is available in Pro Version', 'wp-user-frontend' ); ?></a>
+                </label>
+            </div>
+
+            <div class="control-buttons">
+                <p>
+                    <template v-if="!is_failed_to_validate(field.template)">
+                        <i class="fa fa-arrows move"></i>
+                        <i class="fa fa-pencil" @click="open_field_settings(field.id)"></i>
+                        <i class="fa fa-clone" @click="clone_field(field.id, index)"></i>
+                    </template>
+                    <template v-else>
+                        <i class="fa fa-arrows control-button-disabled"></i>
+                        <i class="fa fa-pencil control-button-disabled"></i>
+                        <i class="fa fa-clone control-button-disabled"></i>
+                    </template>
+                    <i class="fa fa-trash-o" @click="delete_field(index)"></i>
+                </p>
+            </div>
+        </li>
+
+        <li v-if="!form_fields.length" class="field-items empty-list-item"></li>
+
+        <li class="wpuf-submit">
+            <div class="wpuf-label"> </div>
+
+            <?php do_action( 'wpuf_form_builder_template_builder_stage_submit_area' ); ?>
+        </li>
+    </ul><!-- .wpuf-form -->
+
+    <div v-if="hidden_fields.length" class="hidden-field-list">
+        <h4><?php esc_html_e( 'Hidden Fields', 'wp-user-frontend' ); ?></h4>
+
+        <ul class="wpuf-form">
+            <li
+                v-for="(field, index) in hidden_fields"
+                :class="['field-items', parseInt(editing_form_id) === parseInt(field.id) ? 'current-editing' : '']"
+            >
+                <strong><?php esc_html_e( 'key', 'wp-user-frontend' ); ?></strong>: {{ field.name }} | <strong><?php esc_html_e( 'value', 'wp-user-frontend' ); ?></strong>: {{ field.meta_value }}
+
+                <div class="control-buttons">
+                    <p>
+                        <i class="fa fa-pencil" @click="open_field_settings(field.id)"></i>
+                        <i class="fa fa-clone" @click="clone_field(field.id, index)"></i>
+                        <i class="fa fa-trash-o" @click="delete_hidden_field(field.id)"></i>
+                    </p>
+                </div>
+            </li>
+        </ul>
+    </div>
+
+    <?php do_action( 'wpuf_form_builder_template_builder_stage_bottom_area' ); ?>
+</div><!-- #form-preview-stage -->
--- a/wp-user-frontend/admin/form-builder/assets/js/components/field-checkbox/template.php
+++ b/wp-user-frontend/admin/form-builder/assets/js/components/field-checkbox/template.php
@@ -0,0 +1,15 @@
+<div v-if="met_dependencies" class="panel-field-opt panel-field-opt-checkbox wpuf-mb-6">
+    <div class="wpuf-flex">
+        <label v-if="option_field.title" class="wpuf-option-field-title wpuf-font-sm wpuf-text-gray-700 wpuf-font-medium">
+            {{ option_field.title }} <help-text v-if="option_field.help_text" :text="option_field.help_text"></help-text>
+        </label>
+    </div>
+    <ul :class="[option_field.inline ? 'list-inline' : '']">
+        <li v-for="(option, key) in option_field.options">
+            <label class="wpuf-block text-sm/6 wpuf-font-medium wpuf-text-gray-900 !wpuf-mb-0">
+                <input type="checkbox" :class="builder_class_names('checkbox')" class="!wpuf-mr-2" :value="key" v-model="value">
+                {{ option }}
+            </label>
+        </li>
+    </ul>
+</div>
--- a/wp-user-frontend/admin/form-builder/assets/js/components/field-html_help_text/template.php
+++ b/wp-user-frontend/admin/form-builder/assets/js/components/field-html_help_text/template.php
@@ -0,0 +1 @@
+<div class="panel-field-opt panel-field-html-help-text" v-html="option_field.text"></div>
--- a/wp-user-frontend/admin/form-builder/assets/js/components/field-icon_selector/template.php
+++ b/wp-user-frontend/admin/form-builder/assets/js/components/field-icon_selector/template.php
@@ -0,0 +1,115 @@
+<div v-if="met_dependencies" class="panel-field-opt panel-field-opt-icon-selector">
+    <div class="wpuf-flex">
+        <label v-if="option_field.title" class="!wpuf-mb-0">
+            {{ option_field.title }} <help-text v-if="option_field.help_text" :text="option_field.help_text"></help-text>
+        </label>
+    </div>
+
+    <div class="option-fields-section wpuf-relative">
+        <div
+            @click.stop="togglePicker"
+            class="wpuf-w-full wpuf-mt-4 wpuf-min-w-full !wpuf-py-[10px] !wpuf-px-[14px] wpuf-text-gray-700 wpuf-font-medium !wpuf-shadow-sm wpuf-border !wpuf-border-gray-300 !wpuf-rounded-[6px] hover:!wpuf-text-gray-700 wpuf-flex wpuf-justify-between wpuf-items-center !wpuf-text-base wpuf-cursor-pointer"
+        >
+            <div class="wpuf-flex wpuf-items-center wpuf-gap-2">
+                <img v-if="isImageValue" :src="value" alt="" style="width: 20px; height: 20px; object-fit: cover; border-radius: 2px;" />
+                <i v-else-if="value" :class="value" class="wpuf-text-gray-600"></i>
+                <span>{{ selectedIconDisplay }}</span>
+            </div>
+            <div class="wpuf-flex wpuf-items-center wpuf-gap-1">
+                <i v-if="value" @click.stop="clearIcon" class="fa fa-times wpuf-text-gray-500 hover:wpuf-text-red-500 wpuf-cursor-pointer wpuf-p-1"></i>
+                <i :class="showIconPicker ? 'fa-angle-up' : 'fa-angle-down'" class="fa wpuf-text-base"></i>
+            </div>
+        </div>
+
+        <div
+            v-if="showIconPicker"
+            @click.stop
+            class="wpuf-absolute wpuf-bg-white wpuf-border wpuf-border-gray-300 wpuf-rounded-lg wpuf-w-full wpuf-z-50 wpuf-mt-1 wpuf-shadow-lg wpuf-right-0"
+            style="max-height: 350px; min-width: 320px; max-width: 400px;"
+        >
+            <!-- Tabs -->
+            <div class="wpuf-flex wpuf-border-b wpuf-border-gray-200">
+                <button
+                    type="button"
+                    @click.stop="switchTab('icon')"
+                    :class="['wpuf-flex-1 wpuf-py-2 wpuf-px-4 wpuf-text-sm wpuf-font-medium wpuf-border-b-2 wpuf-transition-colors', activeTab === 'icon' ? 'wpuf-border-blue-500 wpuf-text-blue-600' : 'wpuf-border-transparent wpuf-text-gray-500 hover:wpuf-text-gray-700']"
+                >
+                    <i class="fa fa-icons wpuf-mr-1"></i> <?php esc_html_e( 'Icons', 'wp-user-frontend' ); ?>
+                </button>
+                <button
+                    type="button"
+                    @click.stop="switchTab('image')"
+                    :class="['wpuf-flex-1 wpuf-py-2 wpuf-px-4 wpuf-text-sm wpuf-font-medium wpuf-border-b-2 wpuf-transition-colors', activeTab === 'image' ? 'wpuf-border-blue-500 wpuf-text-blue-600' : 'wpuf-border-transparent wpuf-text-gray-500 hover:wpuf-text-gray-700']"
+                >
+                    <i class="fa fa-image wpuf-mr-1"></i> <?php esc_html_e( 'Upload Image', 'wp-user-frontend' ); ?>
+                </button>
+            </div>
+
+            <!-- Icon Tab Content -->
+            <div v-if="activeTab === 'icon'">
+                <!-- Search -->
+                <div class="wpuf-p-3 wpuf-border-b wpuf-border-gray-200">
+                    <input
+                        v-model="searchTerm"
+                        type="text"
+                        placeholder="<?php esc_attr_e( 'Search icons... (e.g., user, email, home)', 'wp-user-frontend' ); ?>"
+                        class="wpuf-w-full !wpuf-px-4 !wpuf-py-1.5 wpuf-border wpuf-border-gray-300 wpuf-rounded wpuf-text-sm wpuf-text-gray-900 placeholder:wpuf-text-gray-400 wpuf-shadow focus:!wpuf-shadow-none"
+                    >
+                    <div class="wpuf-text-xs wpuf-text-gray-500 wpuf-mt-1">
+                        {{ iconCountLabel }}
+                    </div>
+                </div>
+
+                <!-- Icons Grid -->
+                <div class="wpuf-icon-grid-container" style="max-height: 210px; overflow-y: auto; padding: 10px;">
+                    <div v-if="filteredIcons.length > 0" class="wpuf-icon-grid" style="display: grid; grid-template-columns: repeat(4, 1fr); gap: 8px;">
+                        <button
+                            type="button"
+                            v-for="icon in filteredIcons"
+                            :key="icon.class"
+                            @click="selectIcon(icon.class)"
+                            :class="['wpuf-icon-grid-item', { 'selected': value === icon.class }]"
+                            :title="icon.name + ' - ' + icon.keywords"
+                            :aria-pressed="value === icon.class"
+                            style="padding: 10px 5px; text-align: center; border: 1px solid #e0e0e0; border-radius: 4px; cursor: pointer; transition: all 0.2s; min-height: 60px; display: flex; flex-direction: column; align-items: center; justify-content: center;"
+                        >
+                            <i :class="icon.class" style="font-size: 18px; margin-bottom: 4px; color: #555;"></i>
+                            <div style="font-size: 10px; color: #666; line-height: 1.2; word-break: break-word; max-width: 100%;">{{ icon.name }}</div>
+                        </button>
+                    </div>
+
+                    <!-- No Results -->
+                    <div v-else class="wpuf-text-center wpuf-py-8 wpuf-text-gray-500">
+                        <div style="font-size: 16px; margin-bottom: 8px;">No icons found</div>
+                        <div style="font-size: 12px;">Try searching with different keywords like "user", "email", "home"</div>
+                    </div>
+                </div>
+            </div>
+
+            <!-- Image Tab Content -->
+            <div v-if="activeTab === 'image'" class="wpuf-p-4">
+                <div class="wpuf-text-center">
+                    <!-- Image Preview -->
+                    <div v-if="isImageValue" class="wpuf-mb-4">
+                        <img :src="value" alt="" style="max-width: 100px; max-height: 100px; object-fit: cover; border-radius: 8px; border: 2px solid #e0e0e0; margin: 0 auto;" />
+                        <div class="wpuf-text-xs wpuf-text-gray-500 wpuf-mt-2"><?php esc_html_e( 'Current custom image', 'wp-user-frontend' ); ?></div>
+                    </div>
+
+                    <!-- Upload Button -->
+                    <button
+                        type="button"
+                        @click.stop="openMediaUploader"
+                        class="wpuf-inline-flex wpuf-items-center wpuf-gap-2 wpuf-px-4 wpuf-py-2 wpuf-bg-blue-500 wpuf-text-white wpuf-rounded wpuf-text-sm wpuf-font-medium hover:wpuf-bg-blue-600 wpuf-transition-colors"
+                    >
+                        <i class="fa fa-upload"></i>
+                        <?php esc_html_e( 'Upload an image to use as icon', 'wp-user-frontend' ); ?>
+                    </button>
+
+                    <p class="wpuf-text-xs wpuf-text-gray-500 wpuf-mt-3">
+                        <?php esc_html_e( 'Recommended size: 32x32 pixels', 'wp-user-frontend' ); ?>
+                    </p>
+                </div>
+            </div>
+        </div>
+    </div>
+</div>
--- a/wp-user-frontend/admin/form-builder/assets/js/components/field-multiselect/template.php
+++ b/wp-user-frontend/admin/form-builder/assets/js/components/field-multiselect/template.php
@@ -0,0 +1,19 @@
+<div v-if="met_dependencies" class="panel-field-opt panel-field-opt-select">
+    <div class="wpuf-flex">
+        <label v-if="option_field.title" class="!wpuf-mb-0">
+            {{ option_field.title }} <help-text v-if="option_field.help_text" :text="option_field.help_text"></help-text>
+        </label>
+    </div>
+
+    <select
+        :class="['term-list-selector']"
+        class="wpuf-w-full wpuf-mt-2 wpuf-border-primary wpuf-z-30"
+        v-model="value"
+        multiple
+    >
+        <option
+            class="checked:wpuf-bg-primary"
+            v-for="(option, key) in dynamic_options"
+            :value="key">{{ option }}</option>
+    </select>
+</div>
--- a/wp-user-frontend/admin/form-builder/assets/js/components/field-option-data/template.php
+++ b/wp-user-frontend/admin/form-builder/assets/js/components/field-option-data/template.php
@@ -0,0 +1,223 @@
+<div class="panel-field-opt panel-field-opt-text">
+    <div class="wpuf-flex">
+        <label
+            class="wpuf-font-sm wpuf-text-gray-700">{{ option_field.title }}
+        <help-text v-if="option_field.help_text" :text="option_field.help_text"></help-text>
+        </label>
+    </div>
+    <div class="wpuf-mt-2 wpuf-flex">
+        <label class="wpuf-block text-sm/6 wpuf-font-medium wpuf-text-gray-700">
+            <input
+                type="checkbox"
+                v-model="show_value"
+                :class="builder_class_names('checkbox')"
+                class="!wpuf-mr-2" />
+            <?php esc_attr_e( 'Show values', 'wp-user-frontend' ); ?>
+        </label>
+        <label class="wpuf-block text-sm/6 wpuf-font-medium wpuf-text-gray-700 wpuf-ml-8">
+            <input
+                type="checkbox"
+                v-model="sync_value"
+                :class="builder_class_names('checkbox')"
+                class="!wpuf-mr-2" />
+            <?php esc_attr_e( 'Sync values', 'wp-user-frontend' ); ?>
+        </label>
+    </div>
+
+    <div class="wpuf-mt-4">
+        <div class="wpuf-flex wpuf-items-center wpuf-justify-between wpuf-mb-2">
+            <div class="wpuf-flex wpuf-items-center wpuf-gap-2">
+                <span class="wpuf-text-[14px] wpuf-text-gray-700 wpuf-font-medium"><?php esc_attr_e( 'Label & Values', 'wp-user-frontend' ); ?></span>
+                <button
+                    type="button"
+                    @click="open_ai_modal"
+                    class="wpuf-w-8 wpuf-h-8 wpuf-flex wpuf-items-center wpuf-justify-center wpuf-rounded-lg wpuf-shadow-sm hover:wpuf-shadow-md wpuf-border-0"
+                    style="background: linear-gradient(135deg, #FFEE00 0%, #D500FF 28%, #0082FF 100%);"
+                    title="<?php esc_attr_e( 'AI Generate Options', 'wp-user-frontend' ); ?>">
+                    <svg class="wpuf-w-5 wpuf-h-5" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg">
+                        <path d="M8.17766 13.2532L7.5 15.625L6.82234 13.2532C6.4664 12.0074 5.4926 11.0336 4.24682 10.6777L1.875 10L4.24683 9.32234C5.4926 8.9664 6.4664 7.9926 6.82234 6.74682L7.5 4.375L8.17766 6.74683C8.5336 7.9926 9.5074 8.9664 10.7532 9.32234L13.125 10L10.7532 10.6777C9.5074 11.0336 8.5336 12.0074 8.17766 13.2532Z" stroke="white" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>
+                        <path d="M15.2157 7.26211L15 8.125L14.7843 7.26212C14.5324 6.25444 13.7456 5.46764 12.7379 5.21572L11.875 5L12.7379 4.78428C13.7456 4.53236 14.5324 3.74556 14.7843 2.73789L15 1.875L15.2157 2.73788C15.4676 3.74556 16.2544 4.53236 17.2621 4.78428L18.125 5L17.2621 5.21572C16.2544 5.46764 15.4676 6.25444 15.2157 7.26211Z" stroke="white" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>
+                        <path d="M14.0785 17.1394L13.75 18.125L13.4215 17.1394C13.2348 16.5795 12.7955 16.1402 12.2356 15.9535L11.25 15.625L12.2356 15.2965C12.7955 15.1098 13.2348 14.6705 13.4215 14.1106L13.75 13.125L14.0785 14.1106C14.2652 14.6705 14.7045 15.1098 15.2644 15.2965L16.25 15.625L15.2644 15.9535C14.7045 16.1402 14.2652 16.5795 14.0785 17.1394Z" stroke="white" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>
+                    </svg>
+                </button>
+            </div>
+            <?php do_action( 'wpuf_field_option_data_actions' ); ?>
+        </div>
+        <table class="option-field-option-chooser">
+            <tbody>
+                <tr
+                v-for="(option, index) in options"
+                :key="option.id"
+                :data-index="index"
+                class="option-field-option wpuf-flex wpuf-justify-start wpuf-items-center">
+                    <td class="wpuf-flex wpuf-items-center">
+                        <input
+                            v-if="option_field.is_multiple"
+                            type="checkbox"
+                            :value="option.value"
+                            v-model="selected"
+                            :class="builder_class_names('checkbox')"
+                        >
+                        <input
+                            v-else
+                            type="radio"
+                            :value="option.value"
+                            v-model="selected"
+                            class="!wpuf-mt-0"
+                            :class="builder_class_names('radio')"
+                        >
+                        <i class="fa fa-bars sort-handler hover:!wpuf-cursor-move wpuf-text-gray-400 wpuf-ml-1"></i>
+                    </td>
+                    <td>
+                        <input
+                            :class="[builder_class_names('text'), '!wpuf-w-full']"
+                            type="text"
+                            v-model="option.label"
+                            @input="set_option_label(index, option.label)">
+                    </td>
+                    <td v-if="show_value">
+                        <input
+                            :class="[builder_class_names('text'), '!wpuf-w-full']"
+                            type="text"
+                            v-model="option.value">
+                    </td>
+                    <td>
+                        <div class="wpuf-flex wpuf-ml-2">
+                            <div
+                                @click="delete_option(index)"
+                                class="action-buttons hover:wpuf-cursor-pointer">
+                                <svg
+                                    xmlns="http://www.w3.org/2000/svg"
+                                    fill="none"
+                                    viewBox="0 0 24 24"
+                                    stroke-width="1.5"
+                                    stroke="currentColor"
+                                    class="wpuf-size-6 wpuf-border wpuf-rounded-2xl wpuf-border-gray-400 hover:wpuf-border-primary wpuf-p-1">
+                                    <path stroke-linecap="round" stroke-linejoin="round" d="M5 12h14" />
+                                </svg>
+                            </div>
+                            <div
+                                v-if="index === options.length - 1"
+                                @click="add_option"
+                                class="plus-buttons hover:wpuf-cursor-pointer !wpuf-border-0">
+                                <svg
+                                    xmlns="http://www.w3.org/2000/svg"
+                                    fill="none"
+                                    viewBox="0 0 24 24"
+                                    stroke-width="1.5"
+                                    stroke="currentColor"
+                                    class="wpuf-ml-1 wpuf-size-6 wpuf-border wpuf-rounded-2xl wpuf-border-gray-400 wpuf-p-1">
+                                    <path stroke-linecap="round" stroke-linejoin="round" d="M12 4.5v15m7.5-7.5h-15" />
+                                </svg>
+                            </div>
+                        </div>
+                    </td>
+                </tr>
+            </tbody>
+        </table>
+    </div>
+
+    <a
+        v-if="!option_field.is_multiple && selected"
+        class="wpuf-inline-flex wpuf-items-center wpuf-gap-x-2 wpuf-rounded-md wpuf-px-3 wpuf-py-2 wpuf-text-sm wpuf-text-gray-700  hover:wpuf-text-gray-700 hover:wpuf-bg-gray-50 wpuf-ring-1 wpuf-ring-inset wpuf-ring-gray-300 wpuf-mt-4"
+        href="#clear"
+        @click.prevent="clear_selection">
+        <?php esc_attr_e( 'Clear Selection', 'wp-user-frontend' ); ?>
+    </a>
+
+    <!-- AI Generate Options Modal -->
+    <div v-if="show_ai_modal" class="wpuf-ai-modal-overlay" @click="close_ai_modal">
+        <div class="wpuf-ai-modal" @click.stop>
+            <div class="wpuf-ai-modal-header">
+                <h3><?php esc_attr_e( 'AI Generate Options', 'wp-user-frontend' ); ?></h3>
+                <button type="button" @click="close_ai_modal" class="wpuf-ai-modal-close">×</button>
+            </div>
+            <div class="wpuf-ai-modal-body">
+                <label class="wpuf-block wpuf-mb-2 wpuf-text-sm wpuf-font-medium">
+                    <?php esc_attr_e( 'Describe the options you need', 'wp-user-frontend' ); ?>
+                </label>
+                <textarea
+                    v-model="ai_prompt"
+                    rows="3"
+                    class="wpuf-w-full wpuf-px-3 wpuf-py-2 wpuf-border wpuf-rounded"
+                    placeholder="<?php esc_attr_e( 'e.g., List of US states, Business categories, Job titles', 'wp-user-frontend' ); ?>"
+                ></textarea>
+                <div v-if="ai_error" class="wpuf-mt-2 wpuf-text-sm wpuf-text-red-600">{{ ai_error }}</div>
+                <div v-if="ai_generated_options.length" class="wpuf-mt-4">
+                    <div class="wpuf-flex wpuf-justify-between wpuf-items-center wpuf-mb-2">
+                        <span class="wpuf-text-sm wpuf-font-medium"><?php esc_attr_e( 'Generated Options', 'wp-user-frontend' ); ?></span>
+                        <button type="button" @click="select_all_ai_options" class="wpuf-text-sm wpuf-text-primary hover:wpuf-underline">
+                            {{ all_ai_selected ? '<?php esc_attr_e( 'Deselect All', 'wp-user-frontend' ); ?>' : '<?php esc_attr_e( 'Select All', 'wp-user-frontend' ); ?>' }}
+                        </button>
+                    </div>
+                    <div class="wpuf-ai-options-list">
+                        <label v-for="(opt, idx) in ai_generated_options" :key="idx" class="wpuf-flex wpuf-items-center wpuf-py-1 wpuf-cursor-pointer hover:wpuf-bg-gray-50 wpuf-rounded wpuf-px-2">
+                            <input
+                                type="checkbox"
+                                v-model="opt.selected"
+                                :class="builder_class_names('checkbox')">
+                            <span class="wpuf-text-sm wpuf-text-gray-700">{{ opt.label }}</span>
+                        </label>
+                    </div>
+                </div>
+            </div>
+            <div class="wpuf-ai-modal-footer">
+                <button type="button" @click="close_ai_modal" class="wpuf-btn wpuf-btn-secondary">
+                    <?php esc_attr_e( 'Cancel', 'wp-user-frontend' ); ?>
+                </button>
+                <button v-if="!ai_generated_options.length" type="button" @click="generate_ai_options" :disabled="ai_loading || !ai_prompt" class="wpuf-rounded-md wpuf-text-center wpuf-bg-gradient-to-r wpuf-from-purple-600 wpuf-to-blue-600 wpuf-px-3 wpuf-py-2 wpuf-text-sm wpuf-font-semibold wpuf-text-white wpuf-shadow-sm hover:wpuf-from-purple-700 hover:wpuf-to-blue-700 hover:wpuf-text-white focus:wpuf-from-purple-700 focus:wpuf-to-blue-700 focus:wpuf-text-white focus:wpuf-shadow-none hover:wpuf-cursor-pointer wpuf-inline-flex wpuf-items-center disabled:wpuf-opacity-50 disabled:wpuf-cursor-not-allowed wpuf-border-0">
+                    <svg v-if="!ai_loading" class="wpuf-w-5 wpuf-h-5 wpuf-pr-1" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg">
+                        <path d="M8.17766 13.2532L7.5 15.625L6.82234 13.2532C6.4664 12.0074 5.4926 11.0336 4.24682 10.6777L1.875 10L4.24683 9.32234C5.4926 8.9664 6.4664 7.9926 6.82234 6.74682L7.5 4.375L8.17766 6.74683C8.5336 7.9926 9.5074 8.9664 10.7532 9.32234L13.125 10L10.7532 10.6777C9.5074 11.0336 8.5336 12.0074 8.17766 13.2532Z" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>
+                        <path d="M15.2157 7.26211L15 8.125L14.7843 7.26212C14.5324 6.25444 13.7456 5.46764 12.7379 5.21572L11.875 5L12.7379 4.78428C13.7456 4.53236 14.5324 3.74556 14.7843 2.73789L15 1.875L15.2157 2.73788C15.4676 3.74556 16.2544 4.53236 17.2621 4.78428L18.125 5L17.2621 5.21572C16.2544 5.46764 15.4676 6.25444 15.2157 7.26211Z" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>
+                        <path d="M14.0785 17.1394L13.75 18.125L13.4215 17.1394C13.2348 16.5795 12.7955 16.1402 12.2356 15.9535L11.25 15.625L12.2356 15.2965C12.7955 15.1098 13.2348 14.6705 13.4215 14.1106L13.75 13.125L14.0785 14.1106C14.2652 14.6705 14.7045 15.1098 15.2644 15.2965L16.25 15.625L15.2644 15.9535C14.7045 16.1402 14.2652 16.5795 14.0785 17.1394Z" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>
+                    </svg>
+                    <i v-if="ai_loading" class="fa fa-spinner fa-spin wpuf-mr-1"></i>
+                    {{ ai_loading ? '<?php esc_attr_e( 'Generating...', 'wp-user-frontend' ); ?>' : '<?php esc_attr_e( 'Generate', 'wp-user-frontend' ); ?>' }}
+                </button>
+                <button v-else type="button" @click="import_ai_options" class="wpuf-rounded-md wpuf-text-center wpuf-bg-gradient-to-r wpuf-from-purple-600 wpuf-to-blue-600 wpuf-px-3 wpuf-py-2 wpuf-text-sm wpuf-font-semibold wpuf-text-white wpuf-shadow-sm hover:wpuf-from-purple-700 hover:wpuf-to-blue-700 hover:wpuf-text-white focus:wpuf-from-purple-700 focus:wpuf-to-blue-700 focus:wpuf-text-white focus:wpuf-shadow-none hover:wpuf-cursor-pointer wpuf-inline-flex wpuf-items-center wpuf-border-0">
+                    <?php esc_attr_e( 'Import Selected', 'wp-user-frontend' ); ?>
+                </button>
+            </div>
+        </div>
+    </div>
+
+    <!-- AI Provider Configuration Modal -->
+    <div v-if="show_ai_config_modal" class="wpuf-fixed wpuf-top-0 wpuf-left-0 wpuf-w-screen wpuf-h-screen wpuf-bg-black wpuf-bg-opacity-50 wpuf-z-[1000000] wpuf-flex wpuf-items-center wpuf-justify-center">
+        <div class="wpuf-bg-white wpuf-rounded-md wpuf-p-8 wpuf-max-w-xl wpuf-w-full wpuf-mx-5 wpuf-relative">
+            <!-- Key Icon -->
+            <div class="wpuf-flex wpuf-justify-center wpuf-mb-8">
+                <svg width="110" height="110" viewBox="0 0 110 110" fill="none" xmlns="http://www.w3.org/2000/svg">
+                    <rect width="110" height="110" rx="55" fill="#D1FAE5"/>
+                    <path fill-rule="evenodd" clip-rule="evenodd" d="M60 41C55.0294 41 51 45.0294 51 50C51 50.525 51.0451 51.0402 51.1317 51.5419C51.2213 52.0604 51.089 52.4967 50.8369 52.7489L42.1716 61.4142C41.4214 62.1644 41 63.1818 41 64.2426V68C41 68.5523 41.4477 69 42 69H47C47.5523 69 48 68.5523 48 68V66H50C50.5523 66 51 65.5523 51 65V63H53C53.2652 63 53.5196 62.8946 53.7071 62.7071L57.2511 59.1631C57.5033 58.911 57.9396 58.7787 58.4581 58.8683C58.9598 58.9549 59.475 59 60 59C64.9706 59 69 54.9706 69 50C69 45.0294 64.9706 41 60 41ZM60 45C59.4477 45 59 45.4477 59 46C59 46.5523 59.4477 47 60 47C61.6569 47 63 48.3431 63 50C63 50.5523 63.4477 51 64 51C64.5523 51 65 50.5523 65 50C65 47.2386 62.7614 45 60 45Z" fill="#065F46"/>
+                </svg>
+            </div>
+
+            <!-- Title -->
+            <h2 class="wpuf-text-2xl wpuf-font-medium wpuf-text-center wpuf-text-gray-900 wpuf-mb-4">
+                <?php esc_attr_e( 'AI Provider Not Configured', 'wp-user-frontend' ); ?>
+            </h2>
+
+            <!-- Description -->
+            <p class="wpuf-text-lg wpuf-text-center wpuf-text-gray-400 wpuf-mb-16">
+                <?php esc_attr_e( 'To use AI Form Generation, please connect an AI provider by adding your API key in the settings', 'wp-user-frontend' ); ?>
+            </p>
+
+            <!-- Buttons -->
+            <div class="wpuf-flex wpuf-justify-center wpuf-gap-3">
+                <button
+                    type="button"
+                    @click="close_ai_config_modal"
+                    class="wpuf-px-6 wpuf-py-3 wpuf-border wpuf-border-gray-300 wpuf-rounded-md wpuf-text-gray-700 hover:wpuf-bg-gray-50 wpuf-text-lg wpuf-transition-colors wpuf-min-w-[101px]">
+                    <?php esc_attr_e( 'Cancel', 'wp-user-frontend' ); ?>
+                </button>
+                <button
+                    type="button"
+                    @click="go_to_ai_settings"
+                    class="wpuf-px-6 wpuf-py-3 wpuf-bg-emerald-700 hover:wpuf-bg-emerald-800 wpuf-text-white wpuf-rounded-md wpuf-text-lg wpuf-transition-colors wpuf-min-w-[158px]">
+                    <?php esc_attr_e( 'Go to Settings', 'wp-user-frontend' ); ?>
+                </button>
+            </div>
+        </div>
+    </div>
+    <?php do_action( 'wpuf_field_option_data_after' ); ?>
+</div>
--- a/wp-user-frontend/admin/form-builder/assets/js/components/field-option-pro-feature-alert/template.php
+++ b/wp-user-frontend/admin/form-builder/assets/js/components/field-option-pro-feature-alert/template.php
@@ -0,0 +1,8 @@
+<div class="panel-field-opt panel-field-opt-pro-feature wpuf-flex wpuf-items-center wpuf-text-sm wpuf-text-gray-700 wpuf-font-medium">
+    <label>{{ option_field.title }} </label><br>
+    <label
+        class="wpuf-pro-text-alert wpuf-ml-2 wpuf-tooltip-top"
+        data-tip="<?php esc_attr_e( 'Available in PRO version', 'wp-user-frontend' ); ?>">
+        <a :href="pro_link" target="_blank"><img src="<?php echo esc_url( wpuf_get_pro_icon() ) ?>" alt="pro icon"></a>
+    </label>
+</div>
--- a/wp-user-frontend/admin/form-builder/assets/js/components/field-options/template.php
+++ b/wp-user-frontend/admin/form-builder/assets/js/components/field-options/template.php
@@ -0,0 +1,54 @@
+<div class="wpuf-form-builder-field-options">
+    <div v-if="!parseInt(editing_field_id)" class="options-fileds-section text-center">
+        <p class="wpuf-text-gray-500 wpuf-text-lg wpuf-font-medium">{{ i18n.empty_field_options_msg }}</p>
+    </div>
+
+    <div v-else>
+        <div class="option-fields-section wpuf-mt-6">
+            <h3
+                :class="show_basic_settings ? 'wpuf-text-primary' : 'wpuf-text-gray-500'"
+                class="wpuf-flex wpuf-mt-0 wpuf-mb-6 wpuf-justify-between hover:wpuf-cursor-pointer wpuf-font-medium wpuf-text-lg"
+                @click="show_basic_settings = !show_basic_settings">
+                {{ form_field_type_title }}
+                <i :class="show_basic_settings ? 'fa fa-angle-down wpuf-text-primary' : 'fa fa-angle-right wpuf-text-gray-500'"></i>
+            </h3>
+
+            <transition name="slide-fade">
+                <div v-show="show_basic_settings" class="option-field-section-fields">
+                    <component
+                        v-for="option_field in basic_settings"
+                        :key="option_field.name"
+                        :is="'field-' + option_field.type"
+                        :option_field="option_field"
+                        :editing_form_field="editing_form_field"
+                    ></component>
+                </div>
+            </transition>
+        </div>
+
+        <div v-if="advanced_settings.length" class="option-fields-section">
+            <h3
+                :class="show_advanced_settings ? 'wpuf-text-primary' : 'wpuf-text-gray-500'"
+                class="wpuf-flex wpuf-mt-0 wpuf-mb-6 wpuf-justify-between hover:wpuf-cursor-pointer wpuf-font-medium wpuf-text-lg"
+                @click="show_advanced_settings = !show_advanced_settings">
+                {{ i18n.advanced_options }}
+                <i :class="show_advanced_settings ? 'fa fa-angle-down wpuf-text-primary' : 'fa fa-angle-right wpuf-text-gray-500'"></i>
+            </h3>
+
+            <transition name="slide-fade">
+                <div v-show="show_advanced_settings" class="option-field-section-fields">
+                    <component
+                        v-for="option_field in advanced_settings"
+                        :key="option_field.name"
+                        :is="'field-' + option_field.type"
+                        :option_field="option_field"
+                        :editing_form_field="editing_form_field"
+                    ></component>
+                </div>
+            </transition>
+        </div>
+
+        <?php do_action( 'wpuf_builder_field_options' ); ?>
+    </div>
+
+</div>
--- a/wp-user-frontend/admin/form-builder/assets/js/components/field-radio/template.php
+++ b/wp-user-frontend/admin/form-builder/assets/js/components/field-radio/template.php
@@ -0,0 +1,40 @@
+<div v-if="met_dependencies" class="panel-field-opt panel-field-opt-radio">
+    <div class="wpuf-flex">
+        <label
+            class="wpuf-option-field-title wpuf-font-sm wpuf-text-gray-700 wpuf-font-medium">{{ option_field.title }}</label>
+        <help-text v-if="option_field.help_text" :text="option_field.help_text"></help-text>
+    </div>
+    <div
+        v-if="option_field.inline"
+        class="wpuf-flex">
+        <div
+            v-for="(option, key, index) in option_field.options"
+            class="wpuf-items-center">
+            <label
+                :class="index !== 0 ? 'wpuf-ml-8' : ''"
+                class="wpuf-block text-sm/6 wpuf-font-medium wpuf-text-gray-900 !wpuf-mb-0">
+                <input
+                    type="radio"
+                    :value="key"
+                    v-model="value"
+                    :class="builder_class_names('radio')">
+                {{ option }}
+            </label>
+        </div>
+    </div>
+    <div
+        v-else
+        class="wpuf-flex wpuf-items-center"
+        :class="index < Object.keys(option_field.options).length - 1 ? 'wpuf-mb-3' : ''"
+        v-for="(option, key, index) in option_field.options">
+        <label class="!wpuf-mb-0">
+            <input
+                type="radio"
+                :value="key"
+                v-model="value"
+                :class="builder_class_names('radio')">
+            {{ option }}
+        </label>
+
+    </div>
+</div>
--- a/wp-user-frontend/admin/form-builder/assets/js/components/field-range/template.php
+++ b/wp-user-frontend/admin/form-builder/assets/js/components/field-range/template.php
@@ -0,0 +1,14 @@
+<div v-if="met_dependencies" class="panel-field-opt panel-field-opt-text">
+    <div class="wpuf-flex">
+        <label>
+            {{ option_field.title }} <help-text v-if="option_field.help_text" :text="option_field.help_text"></help-text>
+            {{ option_field.min_column }}
+        </label>
+    </div>
+    <input
+        type="range"
+        v-model="value"
+        v-bind:min="minColumn"
+        v-bind:max="maxColumn"
+    >
+</div>
--- a/wp-user-frontend/admin/form-builder/assets/js/components/field-select/template.php
+++ b/wp-user-frontend/admin/form-builder/assets/js/components/field-select/template.php
@@ -0,0 +1,31 @@
+<div v-if="met_dependencies" class="panel-field-opt panel-field-opt-select">
+    <div class="wpuf-flex">
+        <label v-if="option_field.title" class="!wpuf-mb-0">
+            {{ option_field.title }} <help-text v-if="option_field.help_text" :text="option_field.help_text"></help-text>
+        </label>
+    </div>
+
+    <div class="option-fields-section wpuf-relative">
+        <div
+            @click="showOptions = !showOptions"
+            class="wpuf-my-4 wpuf-w-full wpuf-min-w-full !wpuf-py-[10px] !wpuf-px-[14px] wpuf-text-gray-700 wpuf-font-medium !wpuf-shadow-sm wpuf-border !wpuf-border-gray-300 !wpuf-rounded-[6px] focus:!wpuf-ring-transparent focus:checked:!wpuf-ring-transparent hover:checked:!wpuf-ring-transparent hover:!wpuf-text-gray-700 wpuf-flex wpuf-justify-between wpuf-items-center !wpuf-text-base"
+        >
+            {{ selectedOption }}
+            <i
+                :class="showOptions ? 'fa-angle-up' : 'fa-angle-down'"
+                class="fa wpuf-text-base"></i>
+        </div>
+
+        <div
+            v-if="showOptions"
+            class="wpuf-absolute wpuf-bg-white wpuf-border wpuf-border-gray-300 wpuf-rounded-lg wpuf-w-full wpuf-z-40 wpuf--mt-4">
+            <ul>
+                <li
+                    v-for="(option, key) in option_field.options"
+                    @click="[value = key, showOptions = false, selectedOption = option]"
+                    :value="key"
+                    class="wpuf-text-sm wpuf-color-gray-900 wpuf-py-2 wpuf-px-4 hover:wpuf-cursor-pointer hover:wpuf-bg-gray-100">{{ option }}</li>
+            </ul>
+        </div>
+    </div>
+</div>
--- a/wp-user-frontend/admin/form-builder/assets/js/components/field-text-meta/template.php
+++ b/wp-user-frontend/admin/form-builder/assets/js/components/field-text-meta/template.php
@@ -0,0 +1,15 @@
+<div v-if="met_dependencies" class="panel-field-opt panel-field-opt-text panel-field-opt-text-meta">
+    <div class="wpuf-flex">
+        <label
+            :for="option_field.title"
+            class="wpuf-option-field-title wpuf-font-sm wpuf-text-gray-700 wpuf-font-medium">{{ option_field.title }}</label>
+        <help-text v-if="option_field.help_text" :text="option_field.help_text"></help-text>
+    </div>
+    <div class="wpuf-mt-2">
+        <input
+            type="text"
+            v-model="value"
+            :readonly="option_field.is_read_only"
+            :class="builder_class_names('text')">
+    </div>
+</div>
--- a/wp-user-frontend/admin/form-builder/assets/js/components/field-text/template.php
+++ b/wp-user-frontend/admin/form-builder/assets/js/components/field-text/template.php
@@ -0,0 +1,26 @@
+<div v-if="met_dependencies" class="panel-field-opt panel-field-opt-text">
+    <div class="wpuf-flex">
+        <label
+            :for="option_field.name"
+            class="wpuf-option-field-title wpuf-font-sm wpuf-text-gray-700 wpuf-font-medium">{{ option_field.title }}
+        <help-text v-if="option_field.help_text" :text="option_field.help_text"></help-text>
+        </label>
+    </div>
+    <input
+        v-if="option_field.variation && 'number' === option_field.variation"
+        type="number"
+        v-model="value"
+        @focusout="on_focusout"
+        @keyup="on_keyup"
+        :class="builder_class_names('text')">
+
+    <input
+        v-if="!option_field.variation"
+        type="text"
+        v-model="value"
+        @focusout="on_focusout"
+        @keyup="on_keyup"
+        :disabled="option_field.disabled"
+        :readonly="option_field.readonly"
+        :class="builder_class_names('text')">
+</div>
--- a/wp-user-frontend/admin/form-builder/assets/js/components/field-textarea/template.php
+++ b/wp-user-frontend/admin/form-builder/assets/js/components/field-textarea/template.php
@@ -0,0 +1,8 @@
+<div class="panel-field-opt panel-field-opt-textarea">
+    <div class="wpuf-flex">
+        <label class="wpuf-mb-2">
+            {{ option_field.title }} <help-text v-if="option_field.help_text" :text="option_field.help_text"></help-text>
+        </label>
+    </div>
+    <textarea :class="builder_class_names('textareafield')" :rows="option_field.rows || 5" v-model="value"></textarea>
+</div>
--- a/wp-user-frontend/admin/form-builder/assets/js/components/field-visibility/template.php
+++ b/wp-user-frontend/admin/form-builder/assets/js/components/field-visibility/template.php
@@ -0,0 +1,142 @@
+<div class="panel-field-opt panel-field-opt-radio">
+    <div class="wpuf-flex">
+        <label
+            v-if="option_field.title"
+            class="wpuf-option-field-title wpuf-font-sm wpuf-text-gray-700 wpuf-font-medium">{{ option_field.title }}</label>
+        <help-text v-if="option_field.help_text" :text="option_field.help_text"></help-text>
+    </div>
+
+    <div
+        v-if="!option_field.inline"
+        class="wpuf-flex wpuf-items-center wpuf-gap-x-2 wpuf-m-2"
+        v-for="(option, key) in option_field.options">
+        <label
+            class="wpuf-block text-sm/6 wpuf-font-medium wpuf-text-gray-900">
+            <input
+                type="radio"
+                :name="'visibility_' + editing_form_field.id"
+                :value="key"
+                v-model="selected"
+                class="checked:!wpuf-bg-primary checked:before:!wpuf-bg-transparent">
+            {{ option }}</label>
+    </div>
+
+    <div
+        v-if="option_field.inline"
+        class="wpuf-mt-2 wpuf-flex wpuf-flex-wrap">
+        <div
+            v-for="(option, key, index) in option_field.options"
+            class="wpuf-items-center wpuf-mr-9">
+            <label
+                class="wpuf-block wpuf-my-1 wpuf-mr-2 wpuf-font-medium wpuf-t

Proof of Concept (PHP)

NOTICE :

This proof-of-concept is provided for educational and authorized security research purposes only.

You may not use this code against any system, application, or network without explicit prior authorization from the system owner.

Unauthorized access, testing, or interference with systems may violate applicable laws and regulations in your jurisdiction.

This code is intended solely to illustrate the nature of a publicly disclosed vulnerability in a controlled environment and may be incomplete, unsafe, or unsuitable for real-world use.

By accessing or using this information, you acknowledge that you are solely responsible for your actions and compliance with applicable laws.

PHP PoC

<?php
// ==========================================================================
// Atomic Edge CVE Research | https://atomicedge.io
// Copyright (c) Atomic Edge. All rights reserved.
//
// LEGAL DISCLAIMER:
// This proof-of-concept is provided for authorized security testing and
// educational purposes only. Use of this code against systems without
// explicit written permission from the system owner is prohibited and may
// violate applicable laws including the Computer Fraud and Abuse Act (USA),
// Criminal Code s.342.1 (Canada), and the EU NIS2 Directive / national
// computer misuse statutes. This code is provided "AS IS" without warranty
// of any kind. Atomic Edge and its authors accept no liability for misuse,
// damages, or legal consequences arising from the use of this code. You are
// solely responsible for ensuring compliance with all applicable laws in
// your jurisdiction before use.
// ==========================================================================
// Atomic Edge CVE Research - Proof of Concept
// CVE-2026-57334 - User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration <= 4.3.7 - Missing Authorization

$target_url = 'http://example.com/wp-admin/admin-ajax.php';

// Attempt to trigger the vulnerable AJAX action
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $target_url);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query([
    'action' => 'wpuf_vulnerable_action', // Replace with actual action if known
]));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
$response = curl_exec($ch);
$http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

echo "HTTP Code: $http_coden";
echo "Response: $responsen";

if ($http_code === 200 && !empty($response)) {
    echo "Vulnerability may be exploitable.n";
} else {
    echo "Endpoint may be protected.n";
}

Frequently Asked Questions

What is CVE-2026-57334?
Vulnerability overview
CVE-2026-57334 is a missing authorization vulnerability in the User Frontend plugin for WordPress, affecting versions up to and including 4.3.7. It allows unauthenticated attackers to perform unauthorized actions due to a missing capability check on a function.
How does the vulnerability work?
Technical mechanism
The plugin fails to verify user capabilities before executing a specific function, likely an AJAX handler or REST endpoint. An attacker can send a crafted request to admin-ajax.php or a REST route without authentication, triggering the action that should require proper permissions.
Who is affected by this vulnerability?
Affected users
Any WordPress site running the User Frontend plugin version 4.3.7 or earlier is affected. Both authenticated and unauthenticated users may be impacted, as the vulnerability can be exploited by anyone without a login.
How can I check if my site is vulnerable?
Detection steps
Check the plugin version in your WordPress admin dashboard under Plugins. If the version is 4.3.7 or lower, your site is vulnerable. You can also use security scanning tools or manually inspect the plugin code for missing capability checks.
What is the CVSS score and severity?
Risk assessment
The vulnerability has a CVSS score of 5.3, classified as Medium severity. This indicates that while the impact is limited in scope, it still represents a security boundary violation that could allow unauthorized actions.
What is the root cause of this vulnerability?
Root cause analysis
The root cause is a missing capability check on a function in the plugin. The code diff for version 4.3.8 shows only cosmetic changes, but the actual fix adds a capability check, likely using current_user_can(), to a different file not visible in the diff.
How can I fix or mitigate this issue?
Remediation steps
Update the User Frontend plugin to version 4.3.8 or later, which includes the authorization fix. As a temporary mitigation, you can disable the plugin or use a Web Application Firewall (WAF) to block suspicious requests to vulnerable endpoints.
What is the practical risk for my WordPress site?
Impact assessment
An unauthenticated attacker could perform actions that should require authentication, such as modifying plugin settings, accessing sensitive user data, or creating unauthorized posts. The exact impact depends on the vulnerable function, but it violates access controls.
How does the proof of concept demonstrate the issue?
PoC explanation
The provided PHP PoC sends a POST request to admin-ajax.php with a crafted action parameter. If the endpoint returns a 200 response with data, it indicates the vulnerability is exploitable. The PoC is for authorized testing only and should not be used without permission.
What is the patch analysis for this CVE?
Patch details
The patch in version 4.3.8 adds a capability check, likely current_user_can(), to the vulnerable function. The code diff shows only cosmetic changes, but the actual authorization fix is in a different file that restricts access to authenticated users with proper roles.
Can this vulnerability be exploited without authentication?
Exploitation prerequisites
Yes, the vulnerability can be exploited by unauthenticated attackers. The missing capability check means that WordPress processes the request for any visitor, allowing anyone to trigger the vulnerable action without needing a user account.
What should I do if I cannot update the plugin immediately?
Temporary measures
If you cannot update, consider disabling the plugin temporarily or using a Web Application Firewall to block requests to admin-ajax.php with suspicious action parameters. Monitor your site for unauthorized changes and review access logs for unusual activity.

How Atomic Edge Works

Simple Setup. Powerful Security.

Atomic Edge acts as a security layer between your website & the internet. Our AI inspection and analysis engine auto blocks threats before traditional firewall services can inspect, research and build archaic regex filters.

Get Started