Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

WordPress Plugin

WP Plugin Userpro

A WordPress plugin is a piece of software that plugs into your WordPress site. Plugins can add new functionality or extend existing functionality on your site allowing you to create virtually any kind of website from ecommerce stores to portfolios to directory sites.

Official Site:

https://wordpress.org/plugins/userpro

Severity Summary:

Critical: 10 High: 4 Medium: 3
Reference
Title
Severity
CVE-2023-2446
WordPress Plugin UserPro-Community and User Profile Multiple Vulnerabilities
Critical
CVE-2023-6008
WordPress Plugin UserPro-Community and User Profile Multiple Vulnerabilities
Critical
No CVE number
WordPress Plugin UserPro-Community and User Profile Privilege Escalation
Critical
No CVE number
WordPress Plugin UserPro-Community and User Profile Privilege Escalation
Critical
CVE-2023-2437
WordPress Plugin UserPro-Community and User Profile Multiple Vulnerabilities
Critical
CVE-2023-2440
WordPress Plugin UserPro-Community and User Profile Multiple Vulnerabilities
Critical
CVE-2017-16562
WordPress Plugin UserPro-Community and User Profile Security Bypass
Critical
CVE-2023-2447
WordPress Plugin UserPro-Community and User Profile Multiple Vulnerabilities
Critical
CVE-2023-2449
WordPress Plugin UserPro-Community and User Profile Multiple Vulnerabilities
Critical
CVE-2023-6007
WordPress Plugin UserPro-Community and User Profile Multiple Vulnerabilities
Critical
CVE-2023-2438
WordPress Plugin UserPro-Community and User Profile Multiple Cross-Site Request Forgery Vulnerabilities
High
CVE-2023-6009
WordPress Plugin UserPro-Community and User Profile Multiple Vulnerabilities
High
CVE-2023-2497
WordPress Plugin UserPro-Community and User Profile Multiple Cross-Site Request Forgery Vulnerabilities
High
CVE-2023-2448
WordPress Plugin UserPro-Community and User Profile Multiple Vulnerabilities
High
CVE-2019-14470
WordPress Plugin UserPro-Community and User Profile Cross-Site Scripting
Medium
CVE-2018-16285
WordPress Plugin UserPro-Community and User Profile Cross-Site Scripting
Medium
No CVE number
WordPress Plugin UserPro-Community and User Profile Cross-Site Scripting
Medium