WordPress WP User Frontend Plugin Code Injection Vulnerability

A code injection vulnerability has been identified in the WordPress WP User Frontend plugin, affecting versions through 4.1.11. This vulnerability allows for improper control over code generation, enabling malicious actors to inject content into pages and posts. Such an injection could be exploited to introduce phishing pages or other harmful content onto the website.

Impact

Exploitation of this vulnerability could lead to unauthorized content injection, allowing attackers to manipulate website pages and posts. This could be used to inject phishing content or other malicious material, potentially deceiving users or damaging the site's reputation.