User Session Synchronizer

Explore User Session Synchronizer vulnerabilities across all versions. Currently tracking 1 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all User Session Synchronizer vulnerabilities before they are exploited.

Vulnerability Records

1 records


2025-04-09 00:00	User Session Synchronizer <= 1.4.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting User Session Synchronizer <= 1.4.0	`CVE-2025-32612`	6.1 Medium	Abdi Pranata	No

Showing 1–1 of 1 reports

Latestv1.4.0

User Session Synchronizer

Author

rafasashi

4.9(13)

98/100

Last Updated

2023-06-29 (3y ago)

Active Installs

100+

Downloads

8,427

Requires WP

4.3+

Requires PHP

Tested up to

WP 6.2.9

Created

2016-09-08 (10y ago)

User Session Synchronizer allows you to keep the user logged in from one wordpress to another by synchronizing user data and cookie session based on a verified email. The user email is encrypted based on the current user ip and a secret key shared by the synchronized wordpress installations. Features Synchronize session between installations Verify user email through new registration Verify user email through manual admin action Verify user email through email verification code Prevent user form changing email Display historical sessions Auto add new subscriber if user doesn’t exist Destroy session everywhere on logging out Upcoming Multiple secret keys & networks Enable ajax cross-domain requests

View on WordPress.org