Userproplugin UserPRO any version

The UserPro plugin before 4.9.17.1 for WordPress, when used on a site with the "admin" username, allows remote attackers to bypass authentication and obtain administrative access via a "true" value for the up_auto_log parameter in the QUERY_STRING to the default URI.

UserPro <= 5.1.1 - Authentication Bypass to Administrator

UserPro <= 5.1.1 - Insecure Password Reset Mechanism

WordPress UserPro plugin <= 5.1.8 - Unauthenticated Account Takeover vulnerability

UserPro <= 5.1.4 - Authenticated (Subscriber+) Privilege Escalation

UserPro <= 5.1.1 - Cross-Site Request Forgery to Privilege Escalation

UserPro <= 5.1.0 - Cross-Site Request Forgery to PHP Object Injection

UserPro <= 5.1.1 - Missing Authorization via multiple functions

UserPro <= 5.1.4 - Missing Authorization to Arbitrary Shortcode Execution via userpro_shortcode_template

UserPro <= 5.1.1 - Sensitive Information Disclosure via Shortcode

The UserPro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'userpro' shortcode in versions up to, and including, 5.1.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

UserPro <= 5.1.1 - Cross-Site Request Forgery via multiple functions

The UserPro plugin through 4.9.23 for WordPress allows XSS via the shortcode parameter in a userpro_shortcode_template action to wp-admin/admin-ajax.php.

UserPro <= 5.1.1 - Cross-Site Request Forgery to Sensitive Information Exposure

UserPro <= 5.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via userpro_save_userdata

UserPro <= 5.1.6 - Disabled Membership Registration Bypass