WordPress Plugin Vulnerabilities | Page 35 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

users-customers-import-export-for-wp-woocommerce

Published

2025-03-21

Title

Export and Import Users and Customers < 2.6.3 - Authenticated (Admin+) PHP Object Injection via form_data Parameter

Slug

users-customers-import-export-for-wp-woocommerce

Published

2025-03-21

Title

Export and Import Users and Customers < 2.6.3 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function

Slug

Published

2015-06-15

Title

Users to CSV <= 1.4.5 - Cross-Site Request Forgery (CSRF)

Slug

Published

2014-10-07

Title

Users Ultra 1.3.37 - SQL Injection

Slug

Published

2015-02-09

Title

Users Ultra <= 1.4.35 - SQL Injection

Slug

Published

2015-06-04

Title

Users Ultra <= 1.5.15 - SQL Injection

Slug

Published

2015-11-17

Title

Users Ultra Membership Plugin <= 1.5.58 - Unrestricted File Upload

Slug

Published

2015-12-02

Title

Users Ultra Membership Plugin <= 1.5.63 - Authenticated Blind SQL Injection

Slug

Published

2015-12-02

Title

Users Ultra Membership Plugin <= 1.5.62 - Authenticated Stored Cross-Site Scripting (XSS) & CSRF

Slug

Published

2022-03-29

Title

Users Ultra <= 3.1.0 - Unauthenticated SQL Injection

Slug

Published

2023-02-02

Title

Usersnap < 4.17 - Admin+ Stored XSS

Slug

Published

2021-09-06

Title

UsersWP < 1.2.2.29 - Reflected Cross-Site Scripting

Slug

Published

2022-02-14

Title

UsersWP < 1.2.3.1 - Subscriber+ User Avatar Override

Slug

Published

2023-11-01

Title

UsersWP < 1.2.3.23 - Profile Picture Deletion via CSRF

Slug

Published

2024-03-14

Title

UsersWP < 1.2.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode

Slug

Published

2024-04-10

Title

UsersWP < 1.2.6 - Cross-Site Request Forgery

Slug

Published

2024-06-28

Title

UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress < 1.2.11 - Unauthenticated SQL Injection via 'uwp_sort_by'

Slug

Published

2024-07-13

Title

UsersWP < 1.2.12 - Users Information Disclosure

Slug

Published

2024-08-16

Title

UsersWP < 1.2.16 - Missing Authorization

Slug

Published

2025-08-27

Title

UsersWP < 1.2.43 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2025-09-05

Title

UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP < 1.2.45 - Authenticated (Subscriber+) SQL Injection

Slug

Published

2025-11-25

Title

UsersWP < 1.2.48 - Missing Authorization

Slug

Published

2025-12-15

Title

UsersWP < 1.2.49 - Cross-Site Request Forgery

Slug

Published

2026-01-28

Title

UsersWP < 1.2.54 - Cross-Site Request Forgery

Slug

Published

2025-09-16

Title

USS Upyun < 1.5.1 - Cross-Site Request Forgery