WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
userlike
Published
2023-03-21
Title
Userlike – WordPress Live Chat < 2.3 - Admin+ Stored Cross-Site Scripting
Slug
usermaven
Published
2025-03-28
Title
Usermaven < 1.2.2 - Cross-Site Request Forgery
Slug
username-updater
Published
2022-07-18
Title
Easy Username Updater < 1.0.5 - Arbitrary Username Update via CSRF
Slug
usernoise
Published
2014-08-01
Title
Usernoise 3.7.8 - Feedback Submission summary Field XSS
Slug
userplus
Published
2023-04-12
Title
UserPlus <= 2.0 - Stored XSS via CSRF
Slug
userplus
Published
2024-10-09
Title
UserPlus <= 2.0 - Unauthenticated Privilege Escalation
Slug
userplus
Published
2024-10-09
Title
UserPlus <= 2.0 - Missing Authorization via Multiple Functions
Slug
userplus
Published
2024-10-09
Title
UserPlus <= 2.0 - Editor+ Registration Form Update to Privilege Escalation
Slug
userplus
Published
2024-11-18
Title
UserPlus <= 2.0 - Privilege Escalation
Slug
userpro
Published
2017-11-10
Title
UserPro <= 4.9.17 - Authentication Bypass
Slug
userpro
Published
2018-08-31
Title
UserPro <= 4.9.23 - Unauthenticated Cross-Site Scripting (XSS)
Slug
userpro
Published
2018-03-13
Title
UserPro <= 4.9.20 - User Registration With Administrator Role
Slug
userpro
Published
2018-09-10
Title
UserPro <= 4.9.27 - User Registration With Administrator Role
Slug
userpro
Published
2019-08-25
Title
UserPro < 4.9.35.1 - Unauthenticated Reflected XSS
Slug
userpro
Published
2023-11-21
Title
UserPro < 5.1.2 - Cross-Site Request Forgery to Sensitive Information Exposure
Slug
userpro
Published
2023-11-21
Title
UserPro < 5.1.2 - Sensitive Information Disclosure via Shortcode
Slug
userpro
Published
2023-11-21
Title
UserPro < 5.1.2 - Missing Authorization via multiple functions
Slug
userpro
Published
2023-11-21
Title
UserPro < 5.1.2 - Cross-Site Request Forgery to Privilege Escalation
Slug
userpro
Published
2023-11-21
Title
UserPro < 5.1.5 - Missing Authorization to Arbitrary Shortcode Execution via userpro_shortcode_template
Slug
userpro
Published
2023-11-21
Title
UserPro < 5.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via userpro_save_userdata
Slug
userpro
Published
2023-11-21
Title
UserPro < 5.1.2 - Authentication Bypass to Administrator
Slug
userpro
Published
2023-11-21
Title
UserPro < 5.1.2 - Insecure Password Reset Mechanism
Slug
userpro
Published
2023-11-21
Title
UserPro < 5.1.5 - Authenticated (Subscriber+) Privilege Escalation
Slug
userpro
Published
2023-11-21
Title
UserPro < 5.1.2 - Cross-Site Request Forgery via multiple functions
Slug
userpro
Published
2023-11-21
Title
UserPro < 5.1.1 - Cross-Site Request Forgery to PHP Object Injection