Vulnerabilities of n/a UserPro - Community and User Profile WordPress Plugin
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-4187 | The UserPro - Community and User Profile WordPress Plugin plugin for WordPress is vulnerable to Directory Traversal in… | 5.9 Medium | Jun 14, 2025 |
| CVE-2024-0701 | The UserPro plugin for WordPress is vulnerable to Security Feature Bypass in all versions up to, and including, 5.1.6 | 5.3 Medium | Feb 5, 2024 |
| CVE-2023-2439 | The UserPro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'userpro' shortcode in versions up… | 6.4 Medium | Jan 31, 2024 |
| CVE-2023-2497 | The UserPro plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.1.0 | 8.8 High | Nov 22, 2023 |
| CVE-2023-6008 | The UserPro plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.1.1 | 6.3 Medium | Nov 22, 2023 |
| CVE-2023-6009 | The UserPro plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.1.4 due to… | 8.8 High | Nov 22, 2023 |
| CVE-2023-2449 | The UserPro plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 5.1.1 | 9.8 Critical | Nov 22, 2023 |
| CVE-2023-2437 | The UserPro plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.1.1 | 9.8 Critical | Nov 22, 2023 |
| CVE-2023-2448 | The UserPro plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the… | 6.5 Medium | Nov 22, 2023 |
| CVE-2023-2438 | The UserPro plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.1.0 | 6.1 Medium | Nov 22, 2023 |
| CVE-2023-2440 | The UserPro plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.1.1 | 8.8 High | Nov 22, 2023 |
| CVE-2023-6007 | The UserPro plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data due to… | 7.3 High | Nov 22, 2023 |
| CVE-2023-2446 | The UserPro plugin for WordPress is vulnerable to sensitive information disclosure via the 'userpro' shortcode in… | 6.5 Medium | Nov 22, 2023 |
| CVE-2023-2447 | The UserPro plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.1.1 | 6.1 Medium | Nov 22, 2023 |
Other n/a products
n/a 144660
Android 2441
kernel 279
Open5GS 125
Intel(R) Processors 119
BIG-IP 110
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions 106
HPE Intelligent Management Center (IMC) PLAT 105
Moodle 89
Aruba ClearPass Policy Manager 83
GPAC 80
postgresql 79