Skip to content
OpenAdvisories

Vendor

userplus

4 known vulnerabilities.

Products

User registration & user profile – UserPlus 3 UserPlus 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-52442

    WordPress UserPlus plugin <= 2.0 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in userplus UserPlus userplus allows Privilege Escalation.This issue affects UserPlus: from n/a through <= 2.0.

    userplus UserPlus
  • Critical 9.8
    CVE-2024-9518

    UserPlus <= 2.0 - Unauthenticated Privilege Escalation

    The UserPlus plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.0 due to insufficient restriction on the 'form_actions' and 'userplus_update_user_profile' functions. This makes it possible for unauthenticated attack…

    userplus User registration & user profile – UserPlus Web / CMS