3 matches found
PT-2024-15762
Name of the Vulnerable Software and Affected Versions UserPro plugin for WordPress versions up to, and including, 5.1.6 Description The issue is related to a Security Feature Bypass in the UserPro plugin for WordPress. This bypass occurs due to the plugin's reliance on client-side restrictions to...
PT-2023-32470
Name of the Vulnerable Software and Affected Versions UserPro plugin for WordPress versions up to, and including, 5.1.1 Description The issue allows unauthorized access, modification, and loss of data due to a missing capability check on multiple functions. This enables unauthenticated attackers ...
PT-2017-14447
Name of the Vulnerable Software and Affected Versions UserPro plugin for WordPress versions prior to 4.9.17.1 Description The issue allows remote attackers to bypass authentication and obtain administrative access. This can be achieved by setting the up auto log parameter in the QUERY STRING to...