Userpro

Vulnerability Records

26 records


2026-04-15 00:00	UserPro - Community and User Profile WordPress Plugin < 5.1.11 - Cross-Site Request Forgery UserPro - Community and User Profile Wo… < 5.1.11	`CVE-2025-53444`	4.3 Medium	Ananda Dhakal	Yes
2025-12-25 00:00	Userpro <= 5.1.9 - Missing Authorization UserPro - Community and User Profile Wo… <= 5.1.9	`CVE-2025-68608`	5.3 Medium	Ananda Dhakal	No
2025-06-13 19:48	UserPro - Community and User Profile WordPress Plugin <= 5.1.10 - Unauthenticated Arbitrary File Read UserPro - Community and User Profile Wo… <= 5.1.10	`CVE-2025-4187`	5.9 Medium	Trương Hữu Phúc (truonghuuphuc)	No
2024-12-19 00:00	Userpro <= 5.1.9 - Reflected Cross-Site Scripting UserPro - Community and User Profile Wo… <= 5.1.9	`CVE-2024-56210`	6.1 Medium	Rafie Muhammad	No
2024-12-19 00:00	Userpro <= 5.1.9 - Unauthenticated Local File Inclusion UserPro - Community and User Profile Wo… <= 5.1.9	`CVE-2024-56214`	9.8 Critical	Rafie Muhammad	No
2024-12-19 00:00	Userpro <= 5.1.9 - Missing Authorization UserPro - Community and User Profile Wo… <= 5.1.9	`CVE-2024-56211`	4.3 Medium	Rafie Muhammad	No
2024-12-19 00:00	Userpro <= 5.1.9 - Authenticated (Contributor+) SQL Injection UserPro - Community and User Profile Wo… <= 5.1.9	`CVE-2024-56212`	6.5 Medium	Rafie Muhammad	No
2024-05-21 00:00	UserPro <= 5.1.8 - Unauthenticated Account Takeover to Privilege Escalation UserPro - Community and User Profile Wo… 5.1.8	`CVE-2024-35700`	9.8 Critical	Rafie Muhammad	Yes
2024-02-01 00:00	UserPro <= 5.1.6 - Disabled Membership Registration Bypass UserPro - Community and User Profile Wo… <= 5.1.6	`CVE-2024-0701`	5.3 Medium	Rob Stevens	Yes
2023-11-30 00:00	UserPro <= 5.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode UserPro - Community and User Profile Wo… 5.1.5	`CVE-2023-2439`	6.4 Medium	István Márton	Yes

Showing 1–10 of 26 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C