Input validation vulnerability in UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress 1.2.2.28

The UsersWP – User Registration & User Profile plugin for WordPress is vulnerable to a security issue known as Reflected Cross-Site Scripting. This means that in versions up to and including 1.2.2.28, an unauthenticated attacker can inject malicious web scripts into pages that a user can be tricked into visiting. If that happens, the malicious scripts can be executed. This issue is caused by certain parameters not being properly sanitized and escaped.