Skip to content
OpenAdvisories

Vendor

peprodev

7 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8

    PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Authentication Bypass to Account Takeover

    The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to Authentication Bypass in versions 1.9.1 to 7.5.2. This is due to handel_ajax_req() function not having proper restrictions on the change_user_meta functionality that makes it possib…