A vulnerability has been found in UsersWP Plugin up to 1.2.42 on WordPress and classified as problematic. Affected is the function
uwp_profile_header of the component Shortcode Handler. Performing manipulation results in cross site scripting.
This vulnerability is cataloged as CVE-2025-9344. It is possible to initiate the attack remotely. There is no exploit available.
