WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
user-verification
Published
2026-03-23
Title
User Verification by PickPlugins < 2.0.46 - Missing Authorization
Slug
useragent-spy
Published
2023-05-03
Title
UserAgent-Spy <= 1.3.1 - Admin+ Stored XSS
Slug
userback
Published
2023-10-22
Title
Userback < 1.0.14 - Arbitrary Settings Update via CSRF
Slug
userback
Published
2025-12-12
Title
Userback <= 1.0.15 - Missing Authorization to Authenticated (Subscriber+) Plugin's Configuration Exposure
Slug
userbase-access-control
Published
2025-01-16
Title
Userbase Access Control <= 1.0 - Reflected Cross-Site Scripting
Slug
usercentrics-consent-management-platform
Published
2025-10-04
Title
USERCENTRICS CMP <= 1.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
userfeedback-lite
Published
2023-09-04
Title
User Feedback < 1.0.8 - Unauthenticated Stored XSS
Slug
userfeedback-lite
Published
2023-10-17
Title
User Feedback < 1.0.10 - Unauthenticated Stored XSS
Slug
userfeedback-lite
Published
2024-02-21
Title
User Feedback < 1.0.14 - Unauthenticated Stored XSS
Slug
userfeedback-lite
Published
2024-07-12
Title
UserFeedback Lite < 1.0.16 - Unauthenticated Stored Cross-Site Scripting via Name Parameter
Slug
userfeedback-lite
Published
2025-10-24
Title
User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds < 1.9.0 - Missing Authorization to Information Disclosure
Slug
userfeedback-lite
Published
2025-12-22
Title
User Feedback < 1.10.1 - Authenticated (Editor+) SQL Injection
Slug
userfeedback-lite
Published
2026-02-20
Title
User Feedback < 1.11.0 - Authenticated (Editor+) SQL Injection
Slug
userfeedback-lite
Published
2026-03-18
Title
User Feedback < 1.11.0 - Missing Authorization
Slug
userheat
Published
2023-11-07
Title
UserHeat Plugin < 1.1.11 - Settings Update via CSRF
Slug
userlike
Published
2023-03-21
Title
Userlike – WordPress Live Chat < 2.3 - Admin+ Stored Cross-Site Scripting
Slug
usermaven
Published
2025-03-28
Title
Usermaven < 1.2.2 - Cross-Site Request Forgery
Slug
username-updater
Published
2022-07-18
Title
Easy Username Updater < 1.0.5 - Arbitrary Username Update via CSRF
Slug
usernoise
Published
2014-08-01
Title
Usernoise 3.7.8 - Feedback Submission summary Field XSS
Slug
userplus
Published
2023-04-12
Title
UserPlus <= 2.0 - Stored XSS via CSRF
Slug
userplus
Published
2024-10-09
Title
UserPlus <= 2.0 - Unauthenticated Privilege Escalation
Slug
userplus
Published
2024-10-09
Title
UserPlus <= 2.0 - Missing Authorization via Multiple Functions
Slug
userplus
Published
2024-10-09
Title
UserPlus <= 2.0 - Editor+ Registration Form Update to Privilege Escalation
Slug
userplus
Published
2024-11-18
Title
UserPlus <= 2.0 - Privilege Escalation
Slug
userpro
Published
2017-11-10
Title
UserPro <= 4.9.17 - Authentication Bypass