334 matches found
CVE-2025-3054-Exploit
CVE-2025-3054 Exploit: Download here Details CVE ID : CVE-2025-3054 Published : June 5, 2025 CVSS : 8.8 Patch Available: No official patch yet Impact The WP User Frontend Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadfiles functi...
CVE-2021-25076
CVE-2021-25076-Exploit Wordpress Plugin WP User Frontend 3.5.26 - SQL-Injection Authenticated CVE description: The WP User Frontend WordPress plugin before 3.5.26 does not validate and escape the status parameter before using it in a SQL statement in the Subscribers dashboard, leading to an SQL...
WP User <= 7.0 - Unauthenticated SQLi
The WP User WordPress plugin through 7.0 does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users. id: CVE-2022-4049 info: name: WP User = 7.0 - Unauthenticated SQLi author: theamanrawat severity: critica...
PT-2026-113705
The Appointment Booking Plugin ā LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.7.2 via the OsCustomerHelper::create wp user for customer helper reached from the public process step customer booking...
CVE-2026-108496
The WP User Manager WordPress plugin (versions up to and including 2.9.23 ) is vulnerable to a Missing Authorization issue (CWE-862). The flaw allows for the exploitation of Incorrectly Configured Access Control Security Levels , potentially enabling unauthorized actions within the plugin. No spe...
WordPress WP User Manager plugin <= 2.9.23 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Truebird in WordPress Plugin WP User Manager versions = 2.9.23...
CVE-2026-9290
CVE-2026-9290 ā WP User Manager LFI to RCE Exploit Pre-Auth Path Traversal via 'tab' Parameter ā Local File Inclusion Overview CVE-2026-9290 is a high-severity CVSS 7.5 unauthenticated Local File Inclusion vulnerability in the WP User Manager ā User Profile Builder & Membership WordPress plugin ā¤...
CVE-2026-107423
Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.9.22...
CVE-2026-107423 WordPress WP User Manager plugin <= 2.9.22 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.9.22...
EUVD-2026-97298
Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.9.22...
CVE-2026-107423
The WP User Manager WordPress plugin (versions
CVE-2026-107423 WordPress WP User Manager plugin <= 2.9.22 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.9.22...
WordPress WP User Manager plugin <= 2.9.22 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Atia Avela in WordPress Plugin WP User Manager versions = 2.9.22...
PT-2026-110506
Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.9.22...
CVE-2026-96518
Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3...
CVE-2026-96337
Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3...
CVE-2026-96337
The ProfilePress WordPress plugin (versions
EUVD-2026-95593
Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3...
CVE-2026-96518 WordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3...