CVE-2024-56214

Path Traversal: '.../...//' vulnerability in DeluxeThemes Userpro allows Path Traversal.This issue affects Userpro: from n/a through 5.1.9...

CVE-2024-56212

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in DeluxeThemes Userpro.This issue affects Userpro: from n/a through 5.1.9...

CVE-2024-56212 WordPress UserPro plugin <= 5.1.9 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in DeluxeThemes Userpro.This issue affects Userpro: from n/a through 5.1.9...

CVE-2024-56212 WordPress UserPro plugin <= 5.1.9 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in DeluxeThemes Userpro userpro.This issue affects Userpro: from n/a through = 5.1.9...

CVE-2024-56212

CVE-2024-56212 affects the WordPress UserPro plugin (DeluxeThemes Userpro) up to version 5.1.9. Root cause: improper neutralization of special elements in SQL commands, creating a SQL injection in the plugin’s handling of user input. Impact is high (CVE metrics: AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:...

CVE-2024-56211 WordPress UserPro plugin <= 5.1.9 - Authenticated Arbitrary User Meta Update vulnerability

Missing Authorization vulnerability in DeluxeThemes Userpro.This issue affects Userpro: from n/a through 5.1.9...

CVE-2024-56211

CVE-2024-56211 affects the WordPress Plugin UserPro by DeluxeThemes (versions up to 5.1.9). The connected documents describe a Missing Authorization vulnerability that enables an authenticated user to perform an Arbitrary User Meta Update, due to insufficient authorization checks in UserPro. The ...

CVE-2024-56211 WordPress UserPro plugin <= 5.1.9 - Authenticated Arbitrary User Meta Update vulnerability

Missing Authorization vulnerability in DeluxeThemes Userpro userpro.This issue affects Userpro: from n/a through = 5.1.9...

CVE-2024-56214 WordPress UserPro plugin <= 5.1.9 - Local File Inclusion vulnerability

Path Traversal: '.../...//' vulnerability in DeluxeThemes Userpro userpro allows Path Traversal.This issue affects Userpro: from n/a through = 5.1.9...

CVE-2024-56214 WordPress UserPro plugin <= 5.1.9 - Local File Inclusion vulnerability

Path Traversal: '.../...//' vulnerability in DeluxeThemes Userpro userpro allows Path Traversal.This issue affects Userpro: from n/a through = 5.1.9...

CVE-2024-56214

CVE-2024-56214 concerns a Path Traversal/Local File Inclusion vulnerability in the WordPress UserPro plugin (versions

PT-2024-36745 · Deluxethemes · Userpro

Name of the Vulnerable Software and Affected Versions: Userpro versions up to 5.1.9 Description: The issue is related to a missing authorization vulnerability in DeluxeThemes Userpro. This problem allows unauthorized access due to the lack of proper authorization checks. Recommendations: For...

PT-2024-36744 · Userpro · Userpro

Name of the Vulnerable Software and Affected Versions: Userpro versions prior to 5.1.9 Description: The issue involves improper neutralization of input during web page generation, leading to a Cross-site Scripting XSS vulnerability, specifically Reflected XSS. This allows attackers to inject...

WordPress plugin Userpro SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

CVE-2024-56212: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in DeluxeThemes Userpro userpro.This issue affects Userpro: from n/a through = 5.1.9...

CVE-2024-56214: Path Traversal: '.../...//'

Path Traversal: '.../...//' vulnerability in DeluxeThemes Userpro userpro allows Path Traversal.This issue affects Userpro: from n/a through = 5.1.9...

CVE-2024-56210: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DeluxeThemes Userpro userpro allows Reflected XSS.This issue affects Userpro: from n/a through = 5.1.9...

WordPress plugin Userpro 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

WordPress plugin Userpro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-36748 · Deluxethemes · Deluxethemes Userpro

Name of the Vulnerable Software and Affected Versions: DeluxeThemes Userpro versions n/a through 5.1.9 Description: The issue is a Path Traversal vulnerability, identified by the '.../...//' pattern, which allows directory traversal in DeluxeThemes Userpro. This vulnerability enables access to...