Known vulnerabilities in Unknown User Meta – User Profile Builder and User management plugin
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2022-0779 | The User Meta WordPress plugin before 2.4.4 does not validate the filepath parameter of its um_show_uploaded_file AJAX… | Not rated | Jun 6, 2022 |
| CVE-2022-0376 | The User Meta WordPress plugin before 2.4.3 does not sanitise and escape the Form Name, as well as Shared Field Labels… | Not rated | May 30, 2022 |