Medium
CVE-2025-53444
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 33
Reset filters
Medium
CVE-2025-68608
Userpro <= 5.1.9 - Missing Authorization
High
CVE-2025-9693
User Meta – User Profile Builder and User management plugin <= 3.1.2 - Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2025-9260
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 5.1.16 - 6.1.1 - Authenticated (Subscriber+) PHP Object Injection To Arbitrary File Read
Medium
CVE-2025-4187
UserPro - Community and User Profile WordPress Plugin <= 5.1.10 - Unauthenticated Arbitrary File Read
Critical
CVE-2024-12822
Media Manager for UserPro <= 3.12.0 - Missing Authorization to Unauthenticated Arbitrary Options Update
High
CVE-2024-12821
Media Manager for UserPro <= 3.12.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Critical
CVE-2025-22311
Private Messages for UserPro <= 4.10.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-22322
Private Messages for UserPro <= 4.10.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-56212
Userpro <= 5.1.9 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-56211
Userpro <= 5.1.9 - Missing Authorization
Critical
CVE-2024-56214
Userpro <= 5.1.9 - Unauthenticated Local File Inclusion
Medium
CVE-2024-56210
Userpro <= 5.1.9 - Reflected Cross-Site Scripting
Critical
CVE-2024-35700
UserPro <= 5.1.8 - Unauthenticated Account Takeover to Privilege Escalation
Medium
CVE-2024-0701
UserPro <= 5.1.6 - Disabled Membership Registration Bypass
Medium
CVE-2023-2439
UserPro <= 5.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-2497
UserPro <= 5.1.0 - Cross-Site Request Forgery to PHP Object Injection
Medium
CVE-2023-6008
UserPro <= 5.1.1 - Cross-Site Request Forgery via multiple functions
High
CVE-2023-6009
UserPro <= 5.1.4 - Authenticated (Subscriber+) Privilege Escalation
Critical
CVE-2023-2449
UserPro <= 5.1.1 - Insecure Password Reset Mechanism
Critical
CVE-2023-2437
UserPro <= 5.1.1 - Authentication Bypass to Administrator
Medium
CVE-2023-2438
UserPro <= 5.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via userpro_save_userdata
Medium
CVE-2023-2448
UserPro <= 5.1.4 - Missing Authorization to Arbitrary Shortcode Execution via userpro_shortcode_template
High
CVE-2023-2440
UserPro <= 5.1.1 - Cross-Site Request Forgery to Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.