Userplus

4 CVEs across 2 Userplus products. Browse Userplus vulnerabilities, severities, and proof-of-concept exploits.

Userplus products with known CVEs

ProductCVEs
User Registration & User Profile – Userplus3
Userplus1
Userplus CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-52442Critical9.82024-11-20Incorrect Privilege Assignment vulnerability in userplus UserPlus userplus allows Privilege Escalation.This issue affects UserPlus: from n/a through <= 2.0.
CVE-2024-9520Medium6.32024-10-10The UserPlus plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions…
CVE-2024-9519High7.22024-10-10The UserPlus plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the 'save_metabox_form' function in…
CVE-2024-9518Critical9.82024-10-10The UserPlus plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.0 due to insufficient restriction on the 'form_acti…