Stiofan Userswp vulnerabilities

• stiofan userswp WordPress UsersWP plugin <= 1.2.73 - Cross Site Scripting (XSS) vulnerability CVE-2026-94641 Public exploit 7.1 HighOctober 9, 2026
• stiofan userswp WordPress UsersWP plugin <= 1.2.74 - Broken Access Control vulnerability CVE-2026-103086 6.5 MediumOctober 5, 2026
• stiofan userswp UsersWP - Social Login < 1.5.10 - Unauthenticated Account Takeover via Unverified Provider Email CVE-2026-86814 8.1 HighSeptember 19, 2026
• stiofan userswp UsersWP < 1.2.67 - Two-Factor Authentication Bypass CVE-2026-13690 7.4 HighJuly 29, 2026
• stiofan userswp WordPress UsersWP plugin <= 1.2.53 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-25015 4.3 MediumFebruary 3, 2026
• stiofan userswp WordPress UsersWP plugin <= 1.2.48 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-67593 4.3 MediumDecember 9, 2025
• stiofan userswp WordPress UsersWP plugin <= 1.2.47 - Broken Access Control vulnerability CVE-2025-66072 5.3 MediumNovember 21, 2025
• ayecode userswp WordPress UsersWP plugin <= 1.2.15 - Broken Access Control vulnerability CVE-2024-43277 5.3 MediumNovember 1, 2024
• ayecode userswp UsersWP < 1.2.12 - Users Information Disclosure CVE-2024-6477 7.5 HighAugust 3, 2024
• ayecode ltd userswp WordPress UsersWP plugin < 1.2.6 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-31936 5.4 MediumApril 11, 2024
• ayecode userswp WordPress UsersWP Plugin <= 1.2.3.9 is vulnerable to CSV Injection CVE-2022-47442 5.8 MediumNovember 7, 2023