WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
user-activity-log-pro
Published
2024-04-12
Title
User Activity Log Pro <= 2.3.4 - Authenticated (Subscriber+) SQL Injection
Slug
user-activity-log-pro
Published
2024-07-09
Title
User Activity Log Pro <= 2.3.4 - Missing Authorization
Slug
user-activity-tracking-and-log
Published
2023-08-07
Title
User Activity Tracking and Log < 4.0.9 - License Update/Deactivation via CSRF
Slug
user-activity-tracking-and-log
Published
2024-01-29
Title
User Activity Tracking and Log < 4.1.4 - IP Spoofing
Slug
user-avatar
Published
2014-08-01
Title
User Avatar 1.3.7 - shell upload
Slug
user-avatar
Published
2023-10-25
Title
User Avatar < 1.4.12 - Reflected XSS
Slug
user-avatar-reloaded
Published
2023-09-25
Title
User Avatar - Reloaded < 1.2.2 - Contributor+ Stored XSS
Slug
user-avatar-reloaded
Published
2025-09-28
Title
User Avatar - Reloaded <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
user-control
Published
2018-01-28
Title
User Control - Unauthenticated SQL Injection
Slug
user-domain-whitelist
Published
2013-10-09
Title
User Domain Whitelist <= 1.4 - Stored Cross-Site Scripting (XSS)
Slug
user-domain-whitelist
Published
2014-08-01
Title
User Domain Whitelist 1.4 - user-domain-whitelist.php Domain Whitelisting Manipulation CSRF
Slug
user-drop-down-roles-in-registration
Published
2024-10-14
Title
Adding drop down roles in registration <= 1.1 - Unauthenticated Privilege Escalation
Slug
user-export-with-their-meta-data
Published
2021-06-21
Title
Export Users With Meta < 0.6.5 - Admin+ SQLi
Slug
user-export-with-their-meta-data
Published
2022-11-17
Title
Export Users With Meta <= 0.6.10 - Subscriber+ CSV Injection
Slug
user-files
Published
2025-01-16
Title
user files <= 2.4.2 - Unauthenticated Arbitrary File Upload
Slug
user-importer-and-generator
Published
2025-12-04
Title
User Generator and Importer <= 1.2.2 - Cross-Site Request Forgery to Privilege Escalation via Arbitrary Administrator Account Creation
Slug
user-ip-and-location
Published
2023-04-28
Title
User IP and Location < 2.2.1 - Contributor+ Stored XSS
Slug
user-language-switch
Published
2025-08-07
Title
User Language Switch <= 1.6.10 - Reflected Cross-Site Scripting
Slug
user-list
Published
2025-02-21
Title
User List <= 1.5.1 - Reflected Cross-Site Scripting
Slug
user-location-and-ip
Published
2023-10-18
Title
User Location and IP < 2.0 - Contributor+ Stored XSS
Slug
user-login-history
Published
2017-10-26
Title
User Login History <= 1.5 - Cross-Site Scripting (XSS)
Slug
user-login-history
Published
2025-05-07
Title
User Login History < 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
user-login-log
Published
2017-03-01
Title
User Login Log - Stored Cross-Site Scripting (XSS)
Slug
user-magic
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
user-management
Published
2024-11-13
Title
User Management < 1.2 - Subscriber+ Arbitrary File Upload