UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP vulnerabilities
3 known vulnerabilities in UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP from Stiofansisland. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
UsersWP – Front-end login form, User…: Improper Limitation of a Pathname to a Restricted Directory
The UsersWP plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.2.70 via the upload_file_remove() AJAX handler. The plugin stores the value of an account 'file' form field taken directly from $_POST when no real $_
- 8.8 High severity
UsersWP – Front-end login form, User…: Improper Limitation of a Pathname to a Restricted Directory
The UsersWP plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.2.65. This is due to insufficient validation of file-field values in the UsersWP_Validation::validate_fields() function (which falls through to saniti
- 9.8 Critical severity
UsersWP – Front-end login form, User…: Improper Neutralization of Special Elements used in an SQL Command
The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘uwp_sort_by’ parameter in all versions up to, and including, 1.2.10 due to insu