Userswp
Ayecode · 6 CVEs
CVE-2024-43277
MEDIUM
WordPress UsersWP plugin <= 1.2.15 - Broken Access Control vulnerability
Nov 1, 2024
CVE-2024-6477
HIGH
UsersWP < 1.2.12 - Users Information Disclosure
Aug 3, 2024
CVE-2024-6265
CRITICAL
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress <= 1.2.10 - Un…
Jun 29, 2024
CVE-2024-31936
MEDIUM
WordPress UsersWP plugin < 1.2.6 - Cross Site Request Forgery (CSRF) vulnerability
Apr 11, 2024
CVE-2024-2423
MEDIUM
UsersWP <= 1.2.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Apr 9, 2024
CVE-2022-47442
HIGH
WordPress UsersWP Plugin <= 1.2.3.9 is vulnerable to CSV Injection
Nov 7, 2023
CVE-2022-0442
MEDIUM
UsersWP < 1.2.3.1 - Subscriber+ User Avatar Override
Mar 7, 2022
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2024-43277 | WordPress UsersWP plugin <= 1.2.15 - Broken Access Control vulnerability | MEDIUM | 0.40% | Nov 1, 2024 |
| CVE-2024-6477 | UsersWP < 1.2.12 - Users Information Disclosure | HIGH | 0.57% | Aug 3, 2024 |
| CVE-2024-6265 | UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress <= 1.2.10 - Unauthenticated SQL Injection via 'uwp_sor… | CRITICAL | 2.38% | Jun 29, 2024 |
| CVE-2024-31936 | WordPress UsersWP plugin < 1.2.6 - Cross Site Request Forgery (CSRF) vulnerability | MEDIUM | 0.20% | Apr 11, 2024 |
| CVE-2024-2423 | UsersWP <= 1.2.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode | MEDIUM | 0.45% | Apr 9, 2024 |
| CVE-2022-47442 | WordPress UsersWP Plugin <= 1.2.3.9 is vulnerable to CSV Injection | HIGH | 0.68% | Nov 7, 2023 |
| CVE-2022-0442 | UsersWP < 1.2.3.1 - Subscriber+ User Avatar Override | MEDIUM | 0.65% | Mar 7, 2022 |
Showing 1 to 6 of 6 CVEs