Skip to content
OpenAdvisories

Product · userplus

User registration & user profile – UserPlus

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-9518

    UserPlus <= 2.0 - Unauthenticated Privilege Escalation

    The UserPlus plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.0 due to insufficient restriction on the 'form_actions' and 'userplus_update_user_profile' functions. This makes it possible for unauthenticated attack…

    userplus User registration & user profile – UserPlus Web / CMS