Userplace vulnerabilities
We track 1 vulnerability in Userplace products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 8, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Userplace vulnerabilities
- 9.8 Critical severity
Userplace: Improper Privilege Management
The Userplace WordPress plugin through 1.2.0 does not perform authorization checks on an AJAX action available to unauthenticated users and publicly exposes the nonce that protects it, allowing unauthenticated attackers to create an administrator account or wr