Skip to content
OpenAdvisories

Vendor

Stiofan

13 known vulnerabilities.

Products

UsersWP 5 GetPaid 3 BlockStrap Page Builder - Bootstrap Blocks 2 Events Calendar for GeoDirectory 2 AyeCode Connect 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-94641 Public exploit

    WordPress UsersWP plugin <= 1.2.73 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan UsersWP userswp allows Reflected XSS.This issue affects UsersWP: from n/a through 1.2.73.

    Stiofan UsersWP