Userproplugin vulnerabilities

Products

• Userpro 16
• Media Manager 2

Newest

• deluxethemes media manager for userpro, userproplugin media manager +1 more Media Manager for UserPro <= 3.12.0 - Missing Authorization to Unauthenticated Arbitrary Options Update CVE-2024-12822 9.8 CriticalJanuary 30, 2025
• deluxethemes media manager for userpro, userproplugin media manager +1 more Media Manager for UserPro <= 3.12.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update CVE-2024-12821 8.8 HighJanuary 30, 2025
• deluxethemes userpro WordPress UserPro plugin <= 5.1.8 - Unauthenticated Account Takeover vulnerability CVE-2024-35700 9.8 CriticalJune 4, 2024
• userproplugin userpro UserPro <= 5.1.6 - Disabled Membership Registration Bypass CVE-2024-0701 5.3 MediumFebruary 5, 2024
• userproplugin userpro The UserPro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'userpro'... CVE-2023-2439 6.4 MediumJanuary 31, 2024
• userproplugin userpro UserPro <= 5.1.0 - Cross-Site Request Forgery to PHP Object Injection CVE-2023-2497 8.8 HighNovember 22, 2023
• userproplugin userpro UserPro <= 5.1.1 - Cross-Site Request Forgery via multiple functions CVE-2023-6008 6.3 MediumNovember 22, 2023
• userproplugin userpro, userpro community and user profile wordpress plugin community and user profile wordpress plugin +1 more UserPro <= 5.1.4 - Authenticated (Subscriber+) Privilege Escalation CVE-2023-6009 8.8 HighNovember 22, 2023
• userproplugin userpro UserPro <= 5.1.1 - Insecure Password Reset Mechanism CVE-2023-2449 9.8 CriticalNovember 22, 2023
• userproplugin userpro UserPro <= 5.1.1 - Authentication Bypass to Administrator CVE-2023-2437 Public exploit 9.8 CriticalNovember 22, 2023
• userproplugin userpro UserPro <= 5.1.4 - Missing Authorization to Arbitrary Shortcode Execution via userpro_shortcode_template CVE-2023-2448 6.5 MediumNovember 22, 2023
• userproplugin userpro UserPro <= 5.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via userpro_save_userdata CVE-2023-2438 6.1 MediumNovember 22, 2023
• userproplugin userpro UserPro <= 5.1.1 - Cross-Site Request Forgery to Privilege Escalation CVE-2023-2440 8.8 HighNovember 22, 2023
• userproplugin userpro UserPro <= 5.1.1 - Missing Authorization via multiple functions CVE-2023-6007 7.3 HighNovember 22, 2023
• userproplugin userpro UserPro <= 5.1.1 - Sensitive Information Disclosure via Shortcode CVE-2023-2446 6.5 MediumNovember 22, 2023
• userproplugin userpro UserPro <= 5.1.1 - Cross-Site Request Forgery to Sensitive Information Exposure CVE-2023-2447 6.1 MediumNovember 22, 2023
• instagram-php-api project instagram-php-api, userproplugin user pro +1 more Cosenary Instagram-PHP-API contains reflected XSS vulnerability CVE-2019-14470 Public exploit EPSS 83.0% 6.1 MediumSeptember 4, 2019
• userproplugin userpro The UserPro plugin through 4.9.23 for WordPress allows XSS via the shortcode parameter in a... CVE-2018-16285 6.1 MediumSeptember 6, 2018
• userproplugin userpro The UserPro plugin before 4.9.17.1 for WordPress, when used on a site with the "admin" username,... CVE-2017-16562 Public exploit EPSS 27.4% 9.8 CriticalNovember 9, 2017