Skip to content
OpenAdvisories

Vendor

khaledsaikat

2 known vulnerabilities.

Products

User Meta – User Profile Builder and User management plugin 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2024-9262

    User Meta – User Profile Builder and User management plugin <= 3.1.1 - Insecure Direct Object Reference to Sensitive Information Exposure

    The User Meta – User Profile Builder and User management plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.1.1 via the getUser() due to missing validation on a user controlled key. This makes…

    khaledsaikat User Meta – User Profile Builder and User management plugin Web / CMS