UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP vulnerabilities

Product

UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

by stiofansisland · last CVE Sep 11, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 0High 2Medium 6Low 1

Severity

All severities9 Critical0 High2 Medium6 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-13492	8.8	1%	Jul 9	UsersWP <= 1.2.65 - Authenticated (Subscriber+) Arbitrary File Deletion via File Upload Field Affected: through 1.2.65
CVE-2026-19991	8.1	1%	Sep 11	UsersWP <= 1.2.70 - Authenticated (Subscriber+) Arbitrary File Deletion Affected: through 1.2.70