Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin UserPro-Community and User Profile Multiple Vulnerabilities - CVE-2023-2448 - Vulnerability Database
WP Plugin Userpro

WordPress Plugin UserPro-Community and User Profile Multiple Vulnerabilities - CVE-2023-2448

High
Reference: CVE-2023-2448
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2023-2448
Title: WordPress Plugin UserPro-Community and User Profile Multiple Vulnerabilities
Overview:

WordPress Plugin UserPro-Community and User Profile is prone to multiple vulnerabilities including security bypass and privilege escalation vulnerabilities. An attacker may leverage these issues to perform otherwise restricted actions and subsequently perform arbitrary shortcode execution or to bypass the expected capabilities check and perform otherwise restricted actions. WordPress Plugin UserPro-Community and User Profile version 5.1.4 is vulnerable prior versions may also be affected.