Skip to contentStiofansisland Userswp – Front-end Login Form, User Registration, User Profile & Members Directory Plugin For Wp vulnerabilities
- stiofansisland userswp – front-end login form, user registration, user profile & members directory plugin for wpUsersWP <= 1.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'badge' Shortcode AttributeCVE-2026-1206716.4 Medium
- stiofansisland userswp – front-end login form, user registration, user profile & members directory plugin for wpUsersWP <= 1.2.78 - Unauthenticated Account Access via Predictable Dummy User Password Disclosed through Registration Form HashCVE-2026-1199806.5 Medium
- stiofansisland userswp – front-end login form, user registration, user profile & members directory plugin for wpUsersWP <= 1.2.70 - Authenticated (Subscriber+) Arbitrary File DeletionCVE-2026-199918.1 High
- stiofansisland userswp – front-end login form, user registration, user profile & members directory plugin for wpUsersWP <= 1.2.69 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Badge Widget Variable SubstitutionCVE-2026-185016.4 Medium
- stiofansisland userswp – front-end login form, user registration, user profile & members directory plugin for wpUsersWP <= 1.2.65 - Authenticated (Subscriber+) Arbitrary File Deletion via File Upload FieldCVE-2026-134928.8 High
- stiofansisland userswp – front-end login form, user registration, user profile & members directory plugin for wpUsersWP <= 1.2.63 - Insecure Direct Object Reference to Authenticated (Editor+) Arbitrary User Avatar/Banner Reset via 'user_id' ParameterCVE-2026-121022.7 Low
- stiofansisland userswp – front-end login form, user registration, user profile & members directory plugin for wpUsersWP <= 1.2.58 - Authenticated (Subscriber+) Server-Side Request Forgery via 'uwp_crop' ParameterCVE-2026-49795.0 Medium
- stiofansisland userswp – front-end login form, user registration, user profile & members directory plugin for wpUsersWP <= 1.2.58 - Authenticated (Subscriber+) Restricted Usermeta Modification via 'htmlvar' ParameterCVE-2026-49774.3 Medium
- stiofansisland userswp – front-end login form, user registration, user profile & members directory plugin for wpUsersWP <= 1.2.60 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User Badge Link SubstitutionCVE-2026-57426.4 Medium
- stiofansisland userswp – front-end login form, user registration, user profile & members directory plugin for wpUsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP <= 1.2.44 - Authenticated (Subscriber+) SQL InjectionCVE-2025-100036.5 Medium
- stiofansisland userswp – front-end login form, user registration, user profile & members directory plugin for wpUsersWP <= 1.2.42 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-93446.4 Medium
- ayecode userswp, stiofansisland userswp – front-end login form, user registration, user profile & members directory plugin for wp +1 moreUsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress <= 1.2.10 - Unauthenticated SQL Injection via 'uwp_sort_by'CVE-2024-62659.8 Critical
- ayecode userswp, stiofansisland userswp – front-end login form, user registration, user profile & members directory plugin for wp +1 moreUsersWP <= 1.2.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-24236.4 Medium