Plugin icon

Userback

userback

Vulnerabilities:

2

Last Updated:

December 24, 2025

Active Installs:

2000

Published
Title
Fixed in
CVSS
Published
2025-12-12
Title
Userback <= 1.0.15 - Missing Authorization to Authenticated (Subscriber+) Plugin's Configuration Exposure
Fixed in
No known fix
CVSS
4.3 (medium)
Published
2023-10-22
Title
Userback < 1.0.14 - Arbitrary Settings Update via CSRF
Fixed in
Fixed in 1.0.14
CVSS
4.3 (medium)