What’s Vulnerable › Products

wedevs WP User Frontend Pro vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your wedevs WP User Frontend Pro version is affected

Latest wedevs WP User Frontend Pro vulnerabilities

• CVE-2026-32572 — WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2025-3055 — WP User Frontend Pro <= 4.1.3 - Authenticated (Subscriber+) Arbitrary File Deletion (CVSS 8.1)
• CVE-2025-3054 — WP User Frontend Pro <= 4.1.3 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8)