Skip to content
OpenAdvisories

Product · DeluxeThemes

Userpro

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.5
    CVE-2025-68608

    WordPress Userpro plugin <= 5.1.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in DeluxeThemes Userpro userpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Userpro: from n/a through <= 5.1.9.

    DeluxeThemes Userpro
  • High 7.1
    CVE-2024-56210

    WordPress UserPro plugin <= 5.1.9 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DeluxeThemes Userpro userpro allows Reflected XSS.This issue affects Userpro: from n/a through <= 5.1.9.

    DeluxeThemes Userpro
  • High 8.5
    CVE-2024-56212

    WordPress UserPro plugin <= 5.1.9 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DeluxeThemes Userpro userpro.This issue affects Userpro: from n/a through <= 5.1.9.

    DeluxeThemes Userpro
  • High 8.8
    CVE-2024-56211

    WordPress UserPro plugin <= 5.1.9 - Authenticated Arbitrary User Meta Update vulnerability

    Missing Authorization vulnerability in DeluxeThemes Userpro userpro.This issue affects Userpro: from n/a through <= 5.1.9.

    DeluxeThemes Userpro
  • High 8.3
    CVE-2024-56214

    WordPress UserPro plugin <= 5.1.9 - Local File Inclusion vulnerability

    Path Traversal: '.../...//' vulnerability in DeluxeThemes Userpro userpro allows Path Traversal.This issue affects Userpro: from n/a through <= 5.1.9.

    DeluxeThemes Userpro