Deluxethemes

11 CVEs across 3 Deluxethemes products. Browse Deluxethemes vulnerabilities, severities, and proof-of-concept exploits.

Deluxethemes products with known CVEs

ProductCVEs
Userpro7
Media Manager For Userpro2
Private Messages For Userpro2
Deluxethemes CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-53444Medium4.32026-04-15Cross-Site Request Forgery (CSRF) vulnerability in DeluxeThemes Userpro userpro allows Cross Site Request Forgery.This issue affects Userpro: from n/a through…
CVE-2025-68608High7.52025-12-24Missing Authorization vulnerability in DeluxeThemes Userpro userpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
CVE-2024-12822Critical9.82025-01-30The Media Manager for UserPro plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing ca…
CVE-2024-12821High8.82025-01-30The Media Manager for UserPro plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing ca…
CVE-2025-22322High7.12025-01-21Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DeluxeThemes Private Messages for UserPro userpro-messagi…
CVE-2025-22311High7.52025-01-21Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in DeluxeThemes Private Messages for User…
CVE-2024-56210High7.12024-12-31Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DeluxeThemes Userpro userpro allows Reflected XSS.This is…
CVE-2024-56214High8.32024-12-31Path Traversal: '.../...//' vulnerability in DeluxeThemes Userpro userpro allows Path Traversal.This issue affects Userpro: from n/a through <= 5.1.9.
CVE-2024-56212High8.52024-12-31Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DeluxeThemes Userpro userpro.This issue affects Userpro…
CVE-2024-56211High8.82024-12-31Missing Authorization vulnerability in DeluxeThemes Userpro userpro.This issue affects Userpro: from n/a through <= 5.1.9.
CVE-2024-35700Critical9.82024-06-04Incorrect Privilege Assignment vulnerability in DeluxeThemes Userpro userpro.This issue affects Userpro: from n/a through <= 5.1.8.