Description
（CVE-2025-3054）WP User Frontend Pro插件任意文件上传漏洞
（CVE-2025-3054）WP User Frontend Pro插件任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-3054
https://access.redhat.com/security/cve/cve-2025-3054
https://github.com/advisories/GHSA-qh53-m7cx-vgcp
https://www.wordfence.com/blog/2025/06/9000-wordpress-sites-affected-by-arbitrary-file-upload-and-deletion-vulnerabilities-in-wp-user-frontend-pro-wordpress-plugin/
https://patchstack.com/database/wordpress/plugin/wp-user-frontend-pro/vulnerability/wordpress-wp-user-frontend-pro-plugin-4-1-3-authenticated-subscriber-arbitrary-file-upload-vulnerability
https://vulners.com/cve/CVE-2025-3054
https://cve.imfht.com/poc_detail/8a27c92b1b7540a487ef1ee4fbdbd535daa449b0?lang=en
https://vuldb.com/vuln/311195
https://www.cve.org/CVERecord?id=CVE-2025-3054
https://db.gcve.eu/vuln/cve-2025-3054
https://www.nsfocus.net/vulndb/124539