7.5
High
CVE-2025-68608 Missing Authorization vulnerability in DeluxeThemes Userpro userpro allows Exploiting Incorrectly Configured Access…
Description
Missing Authorization vulnerability in DeluxeThemes Userpro userpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Userpro: from n/a through <= 5.1.9.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Userpro 5.1 | earliest → 5.1.9 | No fix stated |
Other CVEs of Userpro
The 7 CVEs of Userpro →
CVE-2025-53444
Cross-Site Request Forgery (CSRF) vulnerability in DeluxeThemes Userpro userpro allows Cross Site Request Forgery.This…
4.3
Medium
CVE-2024-56210
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DeluxeThemes…
7.1
High
CVE-2024-56212
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DeluxeThemes…
8.5
High
CVE-2024-56211
Missing Authorization vulnerability in DeluxeThemes Userpro userpro.This issue affects Userpro: from n/a…
8.8
High