CVE-2026-32572: Wedevs Wp User Frontend Pro

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro <= 4.2.13 versions.

Affected products

• Wedevs Wp User Frontend Pro: up to and including 4.2.13

Published 2026-10-06. Last modified 2026-10-06.