WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
user-submitted-posts
Published
2026-01-01
Title
User Submitted Posts < 20251210 - Unauthenticated Open Redirect
Slug
user-submitted-posts
Published
2026-01-15
Title
User Submitted Posts < 20260113 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'usp_access' Shortcode
Slug
user-submitted-posts
Published
2026-01-23
Title
User Submitted Posts – Enable Users to Submit Posts from the Front End < 20260110 - Unauthenticated Stored Cross-Site Scripting via Custom Field
Slug
user-submitted-posts
Published
2026-02-17
Title
User Submitted Posts < 20260217 - Incorrect Authorization to Unauthenticated Category Restriction Bypass via 'user-submitted-category' Parameter
Slug
user-submitted-posts
Published
2026-06-10
Title
User Submitted Posts < 20260608 - Unauthenticated Stored XSS via Author Name
Slug
user-submitted-posts
Published
2026-09-30
Title
User Submitted Posts – Enable Users to Submit Posts from the Front End < 20260916 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
user-submitted-posts
Published
2026-10-30
Title
User Submitted Posts < 20261029 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'user-submitted-content' Parameter via Block-Comment Shortcode Splitting
Slug
user-sync
Published
2025-09-16
Title
User Sync – Remote User Sync < 1.0.3 - Cross-Site Request Forgery to Plugin Deactivation
Slug
user-toolkit
Published
2024-10-25
Title
User Toolkit < 1.2.4 - Authenticated (Subscriber+) Authentication Bypass
Slug
user-toolkit
Published
2025-10-28
Title
User Toolkit < 1.2.4 - Unauthenticated Privilege Escalation
Slug
user-verification
Published
2022-12-28
Title
User Verification < 1.0.94 - Authentication Bypass
Slug
user-verification
Published
2025-12-04
Title
Email Verification, Email OTP, Block Spam Email, Passwordless login, Hide Login, Magic Login – User Verification < 2.0.45 - Authentication Bypass to Account Takeover
Slug
user-verification
Published
2026-03-23
Title
User Verification by PickPlugins < 2.0.46 - Missing Authorization
Slug
user-verification
Published
2026-05-01
Title
User Verification by PickPlugins < 2.0.47 - Unauthenticated Authentication Bypass via OTP Verification
Slug
user-verification
Published
2026-08-17
Title
User Verification < 2.0.48 - Unauthenticated Arbitrary Account Lockout via IDOR
Slug
useragent-spy
Published
2023-05-03
Title
UserAgent-Spy <= 1.3.1 - Admin+ Stored XSS
Slug
userback
Published
2023-10-22
Title
Userback < 1.0.14 - Arbitrary Settings Update via CSRF
Slug
userback
Published
2025-12-12
Title
Userback < 1.0.16 - Missing Authorization to Authenticated (Subscriber+) Plugin's Configuration Exposure
Slug
userbase-access-control
Published
2025-01-16
Title
Userbase Access Control <= 1.0 - Reflected Cross-Site Scripting
Slug
usercentrics-consent-management-platform
Published
2025-10-04
Title
USERCENTRICS CMP <= 1.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
userfeedback-lite
Published
2023-09-04
Title
User Feedback < 1.0.8 - Unauthenticated Stored XSS
Slug
userfeedback-lite
Published
2023-10-17
Title
User Feedback < 1.0.10 - Unauthenticated Stored XSS
Slug
userfeedback-lite
Published
2024-02-21
Title
User Feedback < 1.0.14 - Unauthenticated Stored XSS
Slug
userfeedback-lite
Published
2024-07-12
Title
UserFeedback Lite < 1.0.16 - Unauthenticated Stored Cross-Site Scripting via Name Parameter
Slug
userfeedback-lite
Published
2025-10-24
Title
User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds < 1.9.0 - Missing Authorization to Information Disclosure