CVE-2025-58673: WordPress WP User Frontend Plugin <= 4.1.12 - Content Injection Vulnerability
Published Sep 22, 2025
·Updated
Improper Control of Generation of Code ('Code Injection') vulnerability in weDevs WP User Frontend wp-user-frontend allows Code Injection.This issue affects WP User Frontend: from n/a through <= 4.1.12.
Affected Software
1 affected component
weDevs WP User Frontend<=4.1.12
Event History
Sep 22, 2025
CVE Published
via MITRE·06:22 PM
Data Sourced
via MITRE·06:22 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-58673?
CVE-2025-58673 is classified as a high severity content injection vulnerability.
2
How do I fix CVE-2025-58673?
To mitigate CVE-2025-58673, update the WP User Frontend plugin to version 4.1.13 or later.
3
Which versions are affected by CVE-2025-58673?
CVE-2025-58673 affects WP User Frontend versions up to and including 4.1.12.
4
What kind of vulnerability is CVE-2025-58673?
CVE-2025-58673 is a content injection vulnerability that allows attackers to inject arbitrary code.
5
Who is the vendor for CVE-2025-58673?
The vendor for CVE-2025-58673 is weDevs, responsible for the WP User Frontend plugin.