User-Meta User Meta User Profile Builder And User Management
2 CVEs affecting User-Meta User Meta User Profile Builder And User Management. Latest disclosed: 2022-06-08. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-0779 | Medium | 6.5 | 2022-06-08 | The User Meta WordPress plugin before 2.4.4 does not validate the filepath parameter of its um_show_uploaded_file AJAX action, which could allow low privileged… |
CVE-2022-0376 | Medium | 4.8 | 2022-05-30 | The User Meta WordPress plugin before 2.4.3 does not sanitise and escape the Form Name, as well as Shared Field Labels before outputting them in the admin dash… |