Known vulnerabilities in wedevs WP User Frontend Pro
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-32572 | Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro <= 4.2.13 versions | 7.1 High | Oct 6, 2026 |
| CVE-2025-3055 | The WP User Frontend Pro plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path… | 8.1 High | Jun 5, 2025 |
| CVE-2025-3054 | The WP User Frontend Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type… | 8.8 High | Jun 5, 2025 |
Other wedevs products
WP User Frontend 15
Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker 12
WP ERP 11
WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts 11
WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting 9
WP Project Manager 9
ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support 8
Dokan Pro 7
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot 6
Happy Addons for Elementor 6
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce 5
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration 5