CVE-2024-56211 WordPress UserPro plugin <= 5.1.9 - Authenticated Arbitrary User Meta Update vulnerability

🗓️ 31 Dec 2024 10:12:03Reported by PatchstackType

Authenticated vulnerability in WordPress UserPro plugin allows arbitrary user meta update.

Reporter	Title	Published	Views	Family All 4
CVE	CVE-2024-56211	31 Dec 202410:15	–	cve
NVD	CVE-2024-56211	31 Dec 202410:15	–	nvd
Cvelist	CVE-2024-56211 WordPress UserPro plugin <= 5.1.9 - Authenticated Arbitrary User Meta Update vulnerability	31 Dec 202410:03	–	cvelist
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 16, 2024 to January 5, 2025)	9 Jan 202514:35	–	wordfence

Source	Link
patchstack	www.patchstack.com/database/wordpress/plugin/userpro/vulnerability/wordpress-userpro-plugin-5-1-9-authenticated-arbitrary-user-meta-update-vulnerability

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

31 Dec 2024 10:03Current

7.2High risk

Vulners AI Score7.2

CVSS38.8

EPSS0.0004

SSVC

CWE-862