EUVD-2026-119478

The Userplace WordPress plugin through 1.2.0 does not perform authorization checks on an AJAX action available to unauthenticated users and publicly exposes the nonce that protects it, allowing unauthenticated attackers to create an administrator account or write arbitrary site options, leading t...

CVE-2026-110963

The Userplace WordPress plugin (version 1.2.0 and below ) is vulnerable to an unauthenticated privilege escalation flaw. The software fails to perform proper authorization checks on an AJAX action accessible to unauthenticated users and publicly exposes the associated nonce . This allows an attac...

CVE-2008-6773

The CVE-2008-6773 entry concerns YourPlace 1.0.2 and earlier, where a static code injection flaw in user/internettoolbar/edit.php allows remote authenticated users to execute arbitrary PHP via 10 fav parameters, resulting in partial impact to confidentiality, integrity, and availability. The root...