WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
usernoise
Published
2014-08-01
Title
Usernoise 3.7.8 - Feedback Submission summary Field XSS
Slug
userplus
Published
2023-04-12
Title
UserPlus <= 2.0 - Stored XSS via CSRF
Slug
userplus
Published
2024-10-09
Title
UserPlus <= 2.0 - Unauthenticated Privilege Escalation
Slug
userplus
Published
2024-10-09
Title
UserPlus <= 2.0 - Missing Authorization via Multiple Functions
Slug
userplus
Published
2024-10-09
Title
UserPlus <= 2.0 - Editor+ Registration Form Update to Privilege Escalation
Slug
userplus
Published
2024-11-18
Title
UserPlus <= 2.0 - Privilege Escalation
Slug
userpro
Published
2017-11-10
Title
UserPro <= 4.9.17 - Authentication Bypass
Slug
userpro
Published
2018-08-31
Title
UserPro <= 4.9.23 - Unauthenticated Cross-Site Scripting (XSS)
Slug
userpro
Published
2018-03-13
Title
UserPro <= 4.9.20 - User Registration With Administrator Role
Slug
userpro
Published
2018-09-10
Title
UserPro <= 4.9.27 - User Registration With Administrator Role
Slug
userpro
Published
2019-08-25
Title
UserPro < 4.9.35.1 - Unauthenticated Reflected XSS
Slug
userpro
Published
2023-11-21
Title
UserPro < 5.1.2 - Cross-Site Request Forgery to Sensitive Information Exposure
Slug
userpro
Published
2023-11-21
Title
UserPro < 5.1.2 - Sensitive Information Disclosure via Shortcode
Slug
userpro
Published
2023-11-21
Title
UserPro < 5.1.2 - Missing Authorization via multiple functions
Slug
userpro
Published
2023-11-21
Title
UserPro < 5.1.2 - Cross-Site Request Forgery to Privilege Escalation
Slug
userpro
Published
2023-11-21
Title
UserPro < 5.1.5 - Missing Authorization to Arbitrary Shortcode Execution via userpro_shortcode_template
Slug
userpro
Published
2023-11-21
Title
UserPro < 5.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via userpro_save_userdata
Slug
userpro
Published
2023-11-21
Title
UserPro < 5.1.2 - Authentication Bypass to Administrator
Slug
userpro
Published
2023-11-21
Title
UserPro < 5.1.2 - Insecure Password Reset Mechanism
Slug
userpro
Published
2023-11-21
Title
UserPro < 5.1.5 - Authenticated (Subscriber+) Privilege Escalation
Slug
userpro
Published
2023-11-21
Title
UserPro < 5.1.2 - Cross-Site Request Forgery via multiple functions
Slug
userpro
Published
2023-11-21
Title
UserPro < 5.1.1 - Cross-Site Request Forgery to PHP Object Injection
Slug
userpro
Published
2023-11-30
Title
UserPro < 5.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
userpro
Published
2024-02-01
Title
UserPro < 5.1.7 - Disabled Membership Registration Bypass
Slug
userpro
Published
2024-05-21
Title
UserPro < 5.1.9 - Unauthenticated Account Takeover to Privilege Escalation