Skip to content
Sign in

Known vulnerabilities in stiofansisland UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

Is your version affected?

CVE list

CVE Summary Score Published
CVE-2026-120671 UsersWP <= 1.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'badge' Shortcode Attribute 6.4 Medium Nov 6, 2026
CVE-2026-119980 The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress is… 6.5 Medium Oct 31, 2026
CVE-2026-19991 The UsersWP plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.2.70 via… 8.1 High Sep 11, 2026
CVE-2026-18501 The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for… 6.4 Medium Aug 6, 2026
CVE-2026-13492 The UsersWP plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.2.65 8.8 High Jul 9, 2026
CVE-2026-12102 The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for… 2.7 Low Jun 18, 2026
CVE-2026-4979 The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for… 5.0 Medium Apr 11, 2026
CVE-2026-4977 The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress is… 4.3 Medium Apr 10, 2026
CVE-2026-5742 The UsersWP plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 1.2.60 6.4 Medium Apr 9, 2026
CVE-2025-10003 The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress plugin… 6.5 Medium Sep 6, 2025
CVE-2025-9344 The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for… 6.4 Medium Aug 28, 2025
CVE-2024-6265 The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress plugin… 9.8 Critical Jun 29, 2024
CVE-2024-2423 The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress plugin… 6.4 Medium Apr 9, 2024

Other stiofansisland products

Payment forms, Buy now buttons, and Invoicing System | GetPaid 2 UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress 2 Events Calendar for GeoDirectory 1