Vulnerability history

Unauthenticated Arbitrary File Read vulnerability

Local File Inclusion vulnerability

SQL Injection vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Authenticated Arbitrary User Meta Update vulnerability

Unauthenticated Account Takeover vulnerability

Disabled Membership Registration Bypass vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Cross-Site Request Forgery via multiple functions vulnerability

Cross-Site Request Forgery to PHP Object Injection vulnerability

Missing Authorization via multiple functions vulnerability

Cross-Site Request Forgery to Privilege Escalation vulnerability

Cross-Site Request Forgery to Sensitive Information Exposure vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting via userpro_save_userdata vulnerability

Authenticated (Subscriber+) Privilege Escalation vulnerability

Authentication Bypass to Administrator vulnerability

Missing Authorization to Arbitrary Shortcode Execution via userpro_shortcode_template vulnerability

Sensitive Information Disclosure via Shortcode vulnerability

Insecure Password Reset Mechanism vulnerability

Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting (XSS) vulnerability

Authentication Bypass Vulnerability