Critical · 9.8 CVE-2024-52442 EUVD-2024-46010GHSA-whfg-68fr-cqmm

WordPress UserPlus plugin <= 2.0 - Privilege Escalation vulnerability

Published Nov 20, 2024 · Updated May 11, 2026 · Assigned by Patchstack

Description

Incorrect Privilege Assignment vulnerability in userplus UserPlus userplus allows Privilege Escalation.This issue affects UserPlus: from n/a through <= 2.0.

Affected products

Vendor	Product	Affected	Fixed
userplus	UserPlus	≤ 2.0	—

References

https://patchstack.com/database/Wordpress/Plugin/userplus/vulnerability/wordpress-userplus-plugin-2-0-privilege-escalation-vulnerability?_s_id=cve vdb-entry