Wp User Project Wp User
2 CVEs affecting Wp User Project Wp User. Latest disclosed: 2023-01-02. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-4049 | Critical | 9.8 | 2023-01-02 | The WP User WordPress plugin through 7.0 does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection explo… |
CVE-2021-25034 | Medium | 6.1 | 2022-02-28 | The WP User WordPress plugin before 7.0 does not sanitise and escape some parameters in pages where the [wp_user] shortcode is used, leading to Reflected Cross… |