CVE-2026-119980

The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress is vulnerable to unauthorized account access via Use of Predictable Password in all versions up to, and including, 1.2.78 The vulnerability exists because getdummyuserpassowrd derives the...

CVE-2026-119980 UsersWP <= 1.2.78 - Unauthenticated Account Access via Predictable Dummy User Password Disclosed through Registration Form Hash

The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress is vulnerable to unauthorized account access via Use of Predictable Password in all versions up to, and including, 1.2.78 The vulnerability exists because getdummyuserpassowrd derives the...

CVE-2026-119980

The UsersWP plugin for WordPress (versions up to and including 1.2.78 ) is vulnerable to unauthorized account access due to the use of predictable passwords. The get_dummy_user_passowrd() function derives a shared password for 25 built-in dummy accounts from a hash that is simultaneously leaked i...

EUVD-2026-114605

The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress is vulnerable to unauthorized account access via Use of Predictable Password in all versions up to, and including, 1.2.78 The vulnerability exists because getdummyuserpassowrd derives the...

CVE-2026-119980: stiofansisland: The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress is…

The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress is vulnerable to unauthorized account access via Use of Predictable Password in all versions up to, and including, 1.2.78 The vulnerability exists because getdummyuserpassowrd derives the...