CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

140 matches found

UserPro <= 5.1.1 - Authentication Bypass

The UserPro plugin for WordPress through 5.1.1 allows authentication bypass via the userprofbconnect AJAX action. id: CVE-2023-2437 info: name: UserPro = 5.1.1 - Authentication Bypass author: intelligent-ears severity: critical description: | The UserPro plugin for WordPress through 5.1.1 allows...

9.8CVSS7.3AI score0.75489EPSS

Exploits4References4

CVE•added 2026/04/15 3:43 p.m.•3 views

CVE-2025-53444

The CVE describes a Cross‑Site Request Forgery (CSRF) vulnerability in the DeluxeThemes WordPress Userpro plugin prior to version 5.1.11, allowing CSRF exploitation. Affected software: WordPress Userpro plugin (pre-5.1.11). Root cause details are not expanded in the provided documents beyond the ...

4.3CVSS5.8AI score0.00017EPSS

Exploits0References1

Vulnrichment•added 2026/04/15 3:43 p.m.•2 views

CVE-2025-53444 WordPress Userpro plugin < 5.1.11 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in DeluxeThemes Userpro allows Cross Site Request Forgery.This issue affects Userpro: from n/a before 5.1.11...

4.3CVSS5.8AI score0.00017EPSS

Exploits0References1

Patchstack•added 2025/12/25 1:59 p.m.•3 views

WordPress Userpro plugin <= 5.1.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Userpro versions = 5.1.9...

8.8CVSS6.7AI score0.00032EPSS

Exploits0Affected Software1

NVD•added 2025/12/24 1:16 p.m.•2 views

CVE-2025-68608

Missing Authorization vulnerability in DeluxeThemes Userpro userpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Userpro: from n/a through = 5.1.9...

7.5CVSS0.00032EPSS

Exploits0References1