Known vulnerabilities in Unknown UsersWP
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-86814 | The UsersWP WordPress plugin before 1.5.10 does not verify that a social login provider has confirmed ownership of an… | 8.1 High | Sep 19, 2026 |
| CVE-2026-13690 | The UsersWP WordPress plugin before 1.2.67 does not validate the selected authentication provider in its two-factor… | 7.4 High | Jul 29, 2026 |
| CVE-2024-6477 | The UsersWP WordPress plugin before 1.2.12 uses predictable filenames when an admin generates an export, which could… | 7.5 High | Aug 3, 2024 |