Skip to content
Ayecode Userswp vulnerabilities
-
ayecode userswp
WordPress UsersWP plugin <= 1.2.15 - Broken Access Control vulnerability
CVE-2024-43277
5.3 Medium
-
ayecode userswp
UsersWP < 1.2.12 - Users Information Disclosure
CVE-2024-6477
7.5 High
-
ayecode userswp, stiofansisland userswp – front-end login form, user registration, user profile & members directory plugin for wp +1 more
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress <= 1.2.10 - Unauthenticated SQL Injection via 'uwp_sort_by'
CVE-2024-6265
9.8 Critical
-
ayecode userswp, stiofansisland userswp – front-end login form, user registration, user profile & members directory plugin for wp +1 more
UsersWP <= 1.2.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-2423
6.4 Medium
-
ayecode userswp
WordPress UsersWP Plugin <= 1.2.3.9 is vulnerable to CSV Injection
CVE-2022-47442
5.8 Medium
-
ayecode userswp, unknown userswp – user registration & user profile +1 more
UsersWP < 1.2.3.1 - Subscriber+ User Avatar Override
CVE-2022-0442
4.3 Medium