Wpuserplus vulnerabilities
We track 2 vulnerabilities in Wpuserplus products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 10, 2024.
2vulnerabilities
1critical
1high
0exploited
8.5average CVSS score
Latest Wpuserplus vulnerabilities
- 7.2 High severity
User registration & user profile – UserPlus: Incorrect Privilege Assignment
The UserPlus plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the 'save_metabox_form' function in versions up to, and including, 2.0. This makes it possible for authenticated attackers, with editor-
- 9.8 Critical severity
User registration & user profile – UserPlus: Improper Privilege Management
The UserPlus plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.0 due to insufficient restriction on the 'form_actions' and 'userplus_update_user_profile' functions. This makes it possible for unauthenticated attacke