Userpro Security Vulnerabilities and Issues — Userpro CVE List

Lucene search

UserpropluginUserpro

4 matches found

CVE•added 2023/11/22 4:15 p.m.•69 views

CVE-2023-2449

The UserPro plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 5.1.1. This is due to the plugin using native password reset functionality, with insufficient validation on the password reset function (userpro_process_form). The function uses the plain...

9.8CVSS6.4AI score0.00558EPSS

CVE•added 2023/11/22 4:15 p.m.•62 views

CVE-2023-2437

The UserPro plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.1.1. This is due to insufficient verification on the user being supplied during a Facebook login through the plugin. This makes it possible for unauthenticated attackers to log in as any exis...

9.8CVSS6.3AI score0.05909EPSS

CVE•added 2017/11/10 2:29 a.m.•53 views

CVE-2017-16562

The UserPro plugin before 4.9.17.1 for WordPress, when used on a site with the "admin" username, allows remote attackers to bypass authentication and obtain administrative access via a "true" value for the up_auto_log parameter in the QUERY_STRING to the default URI.

9.8CVSS9.4AI score0.70451EPSS

CVE•added 2024/06/04 2:15 p.m.•42 views

CVE-2024-35700

Improper Privilege Management vulnerability in DeluxeThemes Userpro allows Privilege Escalation.This issue affects Userpro: from n/a through 5.1.8.

9.8CVSS9.6AI score0.00189EPSS