The WP User Frontend plugin has a security vulnerability.

The WP User Frontend plugin for WordPress (Registration, User Profile, Membership, Content Restriction, User Directory, and Post Submission in Frontend) is vulnerable to arbitrary shortcode execution in all versions prior to 4.1.12. This is due to the software allowing users to execute an action that doesn’t properly validate the value before executing do_shortcode. This allows authenticated attackers with subscriber-level access or higher to execute arbitrary shortcodes. More details here: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wp-user-frontend/wp-user-frontend-4112-authenticated-subscriber-arbitrary-shortcode-execution

Fix this vulnerability!

The page I need help with: [log in to see the link]