CVE-2026-103962 | wedevs User Frontend Plugin up to 4.3.13 on WordPress Shortcode field_attr cross site scripting

October 31, 2026 Yanac

A vulnerability was found in wedevs User Frontend Plugin up to 4.3.13 on WordPress and classified as problematic. The impacted element is an unknown function of the component Shortcode Handler. Such manipulation of the argument field_attr leads to cross site scripting.

This vulnerability is traded as CVE-2026-103962. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More