WordPress WP User Frontend Plugin <= 4.1.12 - Content Injection Vulnerability

Content Injection Vulnerability discovered by Kishan Vyas in WordPress Plugin WP User Frontend versions = 4.1.12...

CVE-2025-58673

CVE-2025-58673 corresponds to a vulnerability in WP User Frontend where an authenticated (Subscriber+) attacker can perform Arbitrary Shortcode Execution through the plugin’s shortcode handling. The Wordfence vulnerability listing confirms the affected software as WP User Frontend (