WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
userpro
Published
2023-11-30
Title
UserPro < 5.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
userpro
Published
2024-02-01
Title
UserPro < 5.1.7 - Disabled Membership Registration Bypass
Slug
userpro
Published
2024-05-21
Title
UserPro < 5.1.9 - Unauthenticated Account Takeover to Privilege Escalation
Slug
userpro
Published
2024-12-19
Title
Userpro <= 5.1.9 - Reflected Cross-Site Scripting
Slug
userpro
Published
2024-12-19
Title
Userpro <= 5.1.9 - Unauthenticated Local File Inclusion
Slug
userpro
Published
2024-12-19
Title
Userpro <= 5.1.9 - Missing Authorization
Slug
userpro
Published
2024-12-19
Title
Userpro <= 5.1.9 - Authenticated (Contributor+) SQL Injection
Slug
userpro
Published
2025-06-13
Title
UserPro - Community and User Profile WordPress Plugin <= 5.1.10 - Unauthenticated Arbitrary File Read
Slug
userpro
Published
2025-12-25
Title
Userpro <= 5.1.9 - Missing Authorization
Slug
userpro-mediamanager
Published
2025-01-30
Title
Media Manager for UserPro <= 3.12.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Slug
userpro-mediamanager
Published
2025-01-30
Title
Media Manager for UserPro <= 3.12.0 - Missing Authorization to Unauthenticated Arbitrary Options Update
Slug
userpro-messaging
Published
2025-01-03
Title
Private Messages for UserPro <= 4.10.0 - Unauthenticated Local File Inclusion
Slug
userpro-messaging
Published
2025-01-03
Title
Private Messages for UserPro <= 4.10.0 - Reflected Cross-Site Scripting
Slug
users-control
Published
2024-09-24
Title
Users Control <= 1.0.16 - Unauthenticated Local File Inclusion
Slug
users-customers-import-export-for-wp-woocommerce
Published
2019-08-22
Title
Import Export WordPress Users < 1.3.2 - CSV Injection
Slug
users-customers-import-export-for-wp-woocommerce
Published
2020-03-11
Title
Import Export WordPress Users < 1.3.9 - Authenticated Arbitrary User Creation
Slug
users-customers-import-export-for-wp-woocommerce
Published
2023-07-14
Title
Export and Import Users and Customers < 2.4.2 - Shop Manager+ Privilege Escalation
Slug
users-customers-import-export-for-wp-woocommerce
Published
2023-12-12
Title
Export and Import Users and Customers < 2.4.9 - Shop Manager+ Arbitrary File Upload
Slug
users-customers-import-export-for-wp-woocommerce
Published
2024-03-28
Title
Import Export WordPress Users < 2.5.3 - Authenticated (Shop Manager+) Path Traversal
Slug
users-customers-import-export-for-wp-woocommerce
Published
2024-04-22
Title
Export and Import Users and Customers < 2.5.4 - Authenticated (Admin+) PHP Object Injection
Slug
users-customers-import-export-for-wp-woocommerce
Published
2025-03-21
Title
Export and Import Users and Customers < 2.6.3 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function
Slug
users-customers-import-export-for-wp-woocommerce
Published
2025-03-21
Title
Export and Import Users and Customers < 2.6.3 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function
Slug
users-customers-import-export-for-wp-woocommerce
Published
2025-03-21
Title
Export and Import Users and Customers < 2.6.3 - Authenticated (Admin+) PHP Object Injection via form_data Parameter
Slug
users-customers-import-export-for-wp-woocommerce
Published
2025-03-21
Title
Export and Import Users and Customers < 2.6.3 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function
Slug
users-to-csv
Published
2015-06-15
Title
Users to CSV <= 1.4.5 - Cross-Site Request Forgery (CSRF)