8.5
High
CVE-2024-56212 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DeluxeThemes…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DeluxeThemes Userpro userpro.This issue affects Userpro: from n/a through <= 5.1.9.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Userpro 5.1 | earliest → 5.1.9 | No fix stated |
Other CVEs of Userpro
The 7 CVEs of Userpro →
CVE-2025-53444
Cross-Site Request Forgery (CSRF) vulnerability in DeluxeThemes Userpro userpro allows Cross Site Request Forgery.This…
4.3
Medium
CVE-2025-68608
Missing Authorization vulnerability in DeluxeThemes Userpro userpro allows Exploiting Incorrectly Configured Access…
7.5
High
CVE-2024-56210
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DeluxeThemes…
7.1
High
CVE-2024-56211
Missing Authorization vulnerability in DeluxeThemes Userpro userpro.This issue affects Userpro: from n/a…
8.8
High