5.3
Medium
CVE-2025-66072 Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control…
Description
Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UsersWP: from n/a through <= 1.2.47.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| UsersWP 1.2 | earliest → 1.2.47 | No fix stated |
Other CVEs of UsersWP
The 6 CVEs of UsersWP →
CVE-2026-94641
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan UsersWP…
7.1
High
CVE-2026-103086
Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control…
6.5
Medium
CVE-2026-25015
Cross-Site Request Forgery (CSRF) vulnerability in Stiofan UsersWP userswp allows Cross Site Request Forgery.This…
4.3
Medium
CVE-2025-67593
Cross-Site Request Forgery (CSRF) vulnerability in Stiofan UsersWP userswp allows Cross Site Request Forgery.This…
4.3
Medium