CVE-2026-32572 Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro <= 4.2.13 versions

Description

Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro <= 4.2.13 versions.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
WP User Frontend Pro 4.2	premières → 4.2.13	Pas de correctif indiqué

Autres CVE de WP User Frontend Pro

Les 3 CVE de WP User Frontend Pro →

CVE-2025-3054 The WP User Frontend Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type… 8.8 Élevée CVE-2025-3055 The WP User Frontend Pro plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path… 8.1 Élevée