VendorsAyeCodeuserswpany version
Vulnerabilities

AyeCode UsersWP any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2024-6265
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress <= 1.2.10 - Unauthenticated SQL Injection via 'uwp_sort_by'
Published 2024-06-29 · Modified
9.8EPSS 0.024
CVE-2022-47442
WordPress UsersWP Plugin <= 1.2.3.9 is vulnerable to CSV Injection
Published 2023-11-07 · Modified
8.8EPSS 0.007
CVE-2024-6477
UsersWP < 1.2.12 - Users Information Disclosure
Published 2024-08-03 · Modified
7.5EPSS 0.006
CVE-2024-2423
UsersWP <= 1.2.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Published 2024-04-09 · Modified
6.4EPSS 0.004
CVE-2022-0442
UsersWP < 1.2.3.1 - Subscriber+ User Avatar Override
Published 2022-03-07 · Modified
4.3EPSS 0.007