Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin UserPro-Community and User Profile Security Bypass - CVE-2017-16562 - Vulnerability Database
WP Plugin Userpro

WordPress Plugin UserPro-Community and User Profile Security Bypass - CVE-2017-16562

Critical
Reference: CVE-2017-16562
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-16562
Title: WordPress Plugin UserPro-Community and User Profile Security Bypass
Overview:

WordPress Plugin UserPro-Community and User Profile is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently bypass authentication mechanism and log in with full administrator access. WordPress Plugin UserPro-Community and User Profile version 4.9.17 is vulnerable prior versions may also be affected.