WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
useinfluence
Published
2025-03-31
Title
Useinfluence <= 1.0.8 - Cross-Site Request Forgery
Slug
user-access-manager
Published
2017-05-11
Title
User Access Manager <= 2.0.8 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
user-access-manager
Published
2011-06-19
Title
User Access Manager < 1.2 - CSRF
Slug
user-access-manager
Published
2023-08-04
Title
User Access Manager < 2.2.18 - IP Spoofing
Slug
user-activation-email
Published
2021-09-08
Title
User Activation Email <= 1.3.0 - Reflected Cross-Site Scripting
Slug
user-activity
Published
2023-02-03
Title
User Activity <= 1.0.1 - IP Spoofing
Slug
user-activity-log
Published
2021-08-30
Title
User Activity Log < 1.4.7 - Reflected Cross Site Scripting via Query String
Slug
user-activity-log
Published
2021-08-30
Title
User Activity Log < 1.4.7 - Reflected Cross-Site Scripting
Slug
user-activity-log
Published
2023-07-03
Title
User Activity Log < 1.6.3 - Admin+ SQL Injection
Slug
user-activity-log
Published
2023-07-24
Title
User Activity Log < 1.6.5 - Unauthenticated SQLi
Slug
user-activity-log
Published
2023-08-09
Title
User Activity Log < 1.6.6 - Subscriber+ Log Export
Slug
user-activity-log
Published
2023-08-14
Title
User Activity Log < 1.6.7 - IP Spoofing
Slug
user-activity-log
Published
2023-07-12
Title
User Activity Log < 1.6.3 - Admin+ SQLi
Slug
user-activity-log
Published
2024-04-07
Title
User Activity Log < 2.0 - Admin+ SQL Injection
Slug
user-activity-log
Published
2026-01-06
Title
User Activity Log <= 2.2 - Unauthenticated Limited Arbitrary Option Update
Slug
user-activity-log
Published
2026-01-06
Title
User Activity Log <= 2.2 - Unauthenticated Limited Options Update via Failed Login
Slug
user-activity-log-pro
Published
2023-09-25
Title
User Activity Log Pro < 2.3.4 - IP Spoofing
Slug
user-activity-log-pro
Published
2023-09-29
Title
User Activity Log Pro < 2.3.4 - Unauthenticated Stored Cross-Site Scripting via User Agent
Slug
user-activity-log-pro
Published
2024-04-12
Title
User Activity Log Pro <= 2.3.4 - Authenticated (Subscriber+) SQL Injection
Slug
user-activity-log-pro
Published
2024-07-09
Title
User Activity Log Pro <= 2.3.4 - Missing Authorization
Slug
user-activity-tracking-and-log
Published
2023-08-07
Title
User Activity Tracking and Log < 4.0.9 - License Update/Deactivation via CSRF
Slug
user-activity-tracking-and-log
Published
2024-01-29
Title
User Activity Tracking and Log < 4.1.4 - IP Spoofing
Slug
user-avatar
Published
2014-08-01
Title
User Avatar 1.3.7 - shell upload
Slug
user-avatar
Published
2023-10-25
Title
User Avatar < 1.4.12 - Reflected XSS
Slug
user-avatar-reloaded
Published
2023-09-25
Title
User Avatar - Reloaded < 1.2.2 - Contributor+ Stored XSS