8.5
Élevée
CVE-2024-56212 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DeluxeThemes…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DeluxeThemes Userpro userpro.This issue affects Userpro: from n/a through <= 5.1.9.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Userpro 5.1 | premières → 5.1.9 | Pas de correctif indiqué |
Autres CVE de Userpro
Les 7 CVE de Userpro →
CVE-2025-53444
Cross-Site Request Forgery (CSRF) vulnerability in DeluxeThemes Userpro userpro allows Cross Site Request Forgery.This…
4.3
Moyenne
CVE-2025-68608
Missing Authorization vulnerability in DeluxeThemes Userpro userpro allows Exploiting Incorrectly Configured Access…
7.5
Élevée
CVE-2024-56210
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DeluxeThemes…
7.1
Élevée
CVE-2024-56211
Missing Authorization vulnerability in DeluxeThemes Userpro userpro.This issue affects Userpro: from n/a…
8.8
Élevée