DeluxeThemes Userpro vulnerabilities
7 published CVEs name DeluxeThemes Userpro among the affected products.
- 7Published CVEs7 of them scored
- 2Last 12 monthspublished in the last year
- 1Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-53444
WordPress Userpro plugin < 5.1.11 - Cross Site Request Forgery (CSRF) vulnerability
DeluxeThemes · Userpro
Medium4.3 - CVE-2025-68608
WordPress Userpro plugin <= 5.1.9 - Broken Access Control vulnerability
DeluxeThemes · Userpro
High7.5 - CVE-2024-56210
WordPress UserPro plugin <= 5.1.9 - Reflected Cross Site Scripting (XSS) vulnerability
DeluxeThemes · Userpro
High7.1 - CVE-2024-56212
WordPress UserPro plugin <= 5.1.9 - SQL Injection vulnerability
DeluxeThemes · Userpro
High8.5 - CVE-2024-56211
WordPress UserPro plugin <= 5.1.9 - Authenticated Arbitrary User Meta Update vulnerability
DeluxeThemes · Userpro
High8.8 - CVE-2024-56214
WordPress UserPro plugin <= 5.1.9 - Local File Inclusion vulnerability
DeluxeThemes · Userpro
High8.3 - CVE-2024-35700
WordPress UserPro plugin <= 5.1.8 - Unauthenticated Account Takeover vulnerability
DeluxeThemes · Userpro
Critical9.8