EUVD-2025-30545

Malicious code in bioql PyPI...

CVE-2025-58672

CVE-2025-58672 is a Missing Authorization vulnerability in WP User Frontend. The connected Wordfence entry confirms an Authenticated (Subscriber+) Arbitrary Shortcode Execution in WP User Frontend

CVE-2025-58673 WordPress WP User Frontend Plugin <= 4.1.12 - Content Injection Vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in weDevs WP User Frontend wp-user-frontend allows Code Injection.This issue affects WP User Frontend: from n/a through = 4.1.12...

CVE-2025-58673

CVE-2025-58673 corresponds to a vulnerability in WP User Frontend where an authenticated (Subscriber+) attacker can perform Arbitrary Shortcode Execution through the plugin’s shortcode handling. The Wordfence vulnerability listing confirms the affected software as WP User Frontend (