CVE-2025-58672: WordPress WP User Frontend Plugin <= 4.1.12 - Broken Access Control Vulnerability
Published Sep 22, 2025
·Updated
Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Frontend: from n/a through <= 4.1.12.
Affected Software
1 affected component
weDevs WP User Frontend<=4.1.12
Event History
Sep 22, 2025
CVE Published
via MITRE·06:22 PM
Data Sourced
via MITRE·06:22 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-58672?
CVE-2025-58672 is classified as a medium severity vulnerability due to its broken access control issues.
2
How do I fix CVE-2025-58672?
To fix CVE-2025-58672, upgrade the WP User Frontend plugin to version 4.1.13 or later.
3
What are the risks associated with CVE-2025-58672?
The risks associated with CVE-2025-58672 include unauthorized access to user data and modification of content.
4
Which versions of WP User Frontend are affected by CVE-2025-58672?
CVE-2025-58672 affects WP User Frontend versions up to and including 4.1.12.
5
Who is the vendor for CVE-2025-58672?
The vendor for CVE-2025-58672 is weDevs, the developers of the WP User Frontend plugin.