Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submission – WP User Frontend 4.1.12

  • Severity: medium-risk
  • Status: Fixed
  • Publication: September 22, 2025

The WP User Frontend plugin for WordPress, which includes features such as registration, user profiles, membership, content restriction, user directory, and frontend post submission, has a security vulnerability. This means that anyone with a subscriber-level or higher account can potentially run malicious shortcodes that have not been properly checked. This can put the website at risk of being attacked.

Detected in:

Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submission – WP User Frontend fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.