İçeriğe atla
Noroxi

UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

userswp · eklenti

UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP için bilinen güvenlik açıkları. Sitenizde bu bileşenin hangi sürümünün çalıştığını WP Lens ile saniyede öğrenin.

16 bilinen açık

1 kritik · 1 kayıt için istismar kodu yayımlanmış · son kayıt 11 Eyl 2026

Güvenlik açıkları

  • CVE-2024-6265

    UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress <= 1.2.10 - Unauthenticated SQL Injection via 'uwp_sort

    Kritik 9.8

  • CVE-2026-13492

    UsersWP <= 1.2.65 - Authenticated (Subscriber+) Arbitrary File Deletion via File Upload Field

    Yüksek 8.8

  • CVE-2022-47442

    WordPress UsersWP Plugin <= 1.2.3.9 is vulnerable to CSV Injection

    Yüksek 8.8

  • CVE-2026-19991

    UsersWP <= 1.2.70 - Authenticated (Subscriber+) Arbitrary File Deletion

    Yüksek 8.1

  • CVE-2025-10003

    UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP <= 1.2.44 - Authenticated (Subscriber+) SQL Injection

    Orta 6.5

  • CVE-2026-5742

    UsersWP <= 1.2.60 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User Badge Link Substitution

    Orta 6.4

  • CVE-2025-9344

    UsersWP <= 1.2.42 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Orta 6.4

  • CVE-2024-2423

    UsersWP <= 1.2.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode

    Orta 6.4

  • CVE-2024-31936→ 1.2.6

    WordPress UsersWP plugin < 1.2.6 - Cross Site Request Forgery (CSRF) vulnerability

    Orta 5.4

  • CVE-2025-66072

    WordPress UsersWP plugin <= 1.2.47 - Broken Access Control vulnerability

    Orta 5.3

  • CVE-2024-43277

    WordPress UsersWP plugin <= 1.2.15 - Broken Access Control vulnerability

    Orta 5.3

  • CVE-2026-4979

    UsersWP <= 1.2.58 - Authenticated (Subscriber+) Server-Side Request Forgery via 'uwp_crop' Parameter

    Orta 5.0

  • CVE-2026-4977

    UsersWP <= 1.2.58 - Authenticated (Subscriber+) Restricted Usermeta Modification via 'htmlvar' Parameter

    Orta 4.3

  • CVE-2026-25015

    WordPress UsersWP plugin <= 1.2.53 - Cross Site Request Forgery (CSRF) vulnerability

    Orta 4.3

  • CVE-2025-67593

    WordPress UsersWP plugin <= 1.2.48 - Cross Site Request Forgery (CSRF) vulnerability

    Orta 4.3

  • CVE-2026-12102

    UsersWP <= 1.2.63 - Insecure Direct Object Reference to Authenticated (Editor+) Arbitrary User Avatar/Banner Reset via 'user_id' Parameter

    Düşük 2.7

← Dizine dön