CVE-2025-3055 | WP User Frontend Pro Plugin up to 4.1.3 on WordPress delete_avatar_ajax denial of service

A vulnerability classified as critical was found in WP User Frontend Pro Plugin up to 4.1.3 on WordPress. This vulnerability affects the function delete_avatar_ajax. The manipulation leads to denial of service.

This vulnerability was named CVE-2025-3055. The attack can be initiated remotely. There is no exploit available.