WordPress Plugin Vulnerabilities | Page 35 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2018-08-31

Title

UserPro <= 4.9.23 - Unauthenticated Cross-Site Scripting (XSS)

Slug

Published

2018-03-13

Title

UserPro <= 4.9.20 - User Registration With Administrator Role

Slug

Published

2018-09-10

Title

UserPro <= 4.9.27 - User Registration With Administrator Role

Slug

Published

2019-08-25

Title

UserPro < 4.9.35.1 - Unauthenticated Reflected XSS

Slug

Published

2023-11-21

Title

UserPro < 5.1.2 - Cross-Site Request Forgery to Sensitive Information Exposure

Slug

Published

2023-11-21

Title

UserPro < 5.1.2 - Sensitive Information Disclosure via Shortcode

Slug

Published

2023-11-21

Title

UserPro < 5.1.2 - Missing Authorization via multiple functions

Slug

Published

2023-11-21

Title

UserPro < 5.1.2 - Cross-Site Request Forgery to Privilege Escalation

Slug

Published

2023-11-21

Title

UserPro < 5.1.5 - Missing Authorization to Arbitrary Shortcode Execution via userpro_shortcode_template

Slug

Published

2023-11-21

Title

UserPro < 5.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via userpro_save_userdata

Slug

Published

2023-11-21

Title

UserPro < 5.1.2 - Authentication Bypass to Administrator

Slug

Published

2023-11-21

Title

UserPro < 5.1.2 - Insecure Password Reset Mechanism

Slug

Published

2023-11-21

Title

UserPro < 5.1.5 - Authenticated (Subscriber+) Privilege Escalation

Slug

Published

2023-11-21

Title

UserPro < 5.1.2 - Cross-Site Request Forgery via multiple functions

Slug

Published

2023-11-21

Title

UserPro < 5.1.1 - Cross-Site Request Forgery to PHP Object Injection

Slug

Published

2023-11-30

Title

UserPro < 5.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Slug

Published

2024-02-01

Title

UserPro < 5.1.7 - Disabled Membership Registration Bypass

Slug

Published

2024-05-21

Title

UserPro < 5.1.9 - Unauthenticated Account Takeover to Privilege Escalation

Slug

Published

2024-12-19

Title

Userpro <= 5.1.9 - Reflected Cross-Site Scripting

Slug

Published

2024-12-19

Title

Userpro <= 5.1.9 - Unauthenticated Local File Inclusion

Slug

Published

2024-12-19

Title

Userpro <= 5.1.9 - Missing Authorization

Slug

Published

2024-12-19

Title

Userpro <= 5.1.9 - Authenticated (Contributor+) SQL Injection

Slug

Published

2025-06-13

Title

UserPro - Community and User Profile WordPress Plugin <= 5.1.10 - Unauthenticated Arbitrary File Read

Slug

Published

2025-12-25

Title

Userpro <= 5.1.9 - Missing Authorization

Slug

Published

2026-04-15

Title

UserPro - Community and User Profile WordPress Plugin < 5.1.11 - Cross-Site Request Forgery