Vendor

stiofansisland

16 known vulnerabilities.

Products

UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP 13 Payment forms, Buy now buttons, and Invoicing System | GetPaid 2 Events Calendar for GeoDirectory 1

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Low 2.7

CVE-2026-12102

UsersWP <= 1.2.63 - Insecure Direct Object Reference to Authenticated (Editor+) Arbitrary User Avatar/Banner Reset via 'user_id' Parameter

The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.2.63 via the 'user_id' parameter due to missin…

stiofansisland UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP Web / CMS

Jun 18, 2026