Input validation vulnerability in WP User Frontend – Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submission Plugin 3.5.25

The WP User Frontend – Membership, Profile, Registration & Post Submission Plugin for WordPress is vulnerable to a form of attack known as SQL Injection. This type of attack can allow someone with admin-level privileges to access sensitive information stored in the plugin’s database, such as passwords or credit card numbers. Versions of the plugin before 3.5.25 are affected due to a lack of protection on user-supplied parameters and inadequate preparation of existing SQL queries.