The vulnerability CVE-2025-58673 affects the WP User Frontend plugin by weDevs, specifically versions up to and including 4.1.12. It involves improper control over the generation of code, leading to a code injection vulnerability. The CVSS 3.1 base score is 5.4 (medium), with an attack vector of network, low attack complexity, requiring low privileges and no user interaction. The impact is limited to confidentiality and integrity loss without affecting availability. No patch or vendor advisory is currently available to confirm remediation status.

Exploitation of this vulnerability could allow an attacker with low privileges to inject code remotely, potentially leading to limited unauthorized disclosure or modification of data. There is no indication of availability impact or widespread exploitation. The overall impact is rated medium based on the CVSS score and described effects.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from weDevs and consider restricting access to the plugin's functionality to trusted users only. No vendor advisory or patch links are currently available.