Login Request a demo
US
Product
Userswp
by Ayecode · last CVE Aug 3, 2024
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 2Medium 2Low 0
Severity
All severities5Critical1High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Userswp to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-6265
9.8
2%
Jun 29
The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the…
Affected: before 1.2.11
CVE-2022-47442
8.8
1%
Nov 7
Improper Neutralization of Formula Elements in a CSV File vulnerability in AyeCode Ltd UsersWP.This issue affects UsersWP: from n/a through 1.2.3.9
Affected: before 1.2.3.10
CVE-2024-6477
7.5
1%
Aug 3
The UsersWP WordPress plugin before 1.2.12 uses predictable filenames when an admin generates an export, which could allow unauthenticated attackers to download them and retrieve…
Affected: before 1.2.12
CVE-2024-2423
6.4
0%
Apr 9
The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…
Affected: before 1.2.7
CVE-2022-0442
4.3
1%
Mar 7
The UsersWP WordPress plugin before 1.2.3.1 is missing access controls when updating a user avatar, and does not make sure file names for user avatars are unique, allowing a…
Affected: before 1.2.3.1
Showing 5