Medium · 4.3 CVE-2025-53444 EUVD-2025-209483GHSA-74c3-5r2f-v2xg

WordPress Userpro plugin < 5.1.11 - Cross Site Request Forgery (CSRF) vulnerability

Published Apr 15, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in DeluxeThemes Userpro userpro allows Cross Site Request Forgery.This issue affects Userpro: from n/a through < 5.1.11.

Affected products

Vendor	Product	Affected	Fixed
DeluxeThemes	Userpro	≤ 5.1.11	—

References

https://patchstack.com/database/Wordpress/Plugin/userpro/vulnerability/wordpress-userpro-plugin-5-1-11-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry