UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP vulnerabilities

Product

UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

by stiofansisland · last CVE Sep 11, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 0High 2Medium 6Low 1

Severity

All severities9 Critical0 High2 Medium6 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-12102	2.7	0%	Jun 18	UsersWP <= 1.2.63 - Insecure Direct Object Reference to Authenticated (Editor+) Arbitrary User Avatar/Banner Reset via 'user_id' Parameter Affected: through 1.2.63