Pricing
Case studies
Login
Start trial
UsersWP
Stiofan
Developer
1.2.51
Latest version
20,000
Installations
No date
Last updated
WordPress Plugin
No VDP
See changelog
Claim ownership
Report vulnerability
Vulnerabilities
Security Contributors
Vulnerability history
0 present
10 fixed
2 Mitigation rules
Broken Access Control vulnerability
<= 1.2.47
Nov 25, 2025
Authenticated (Subscriber+) SQL Injection vulnerability
<= 1.2.44
Sep 6, 2025
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
<= 1.2.42
Aug 27, 2025
Broken Access Control vulnerability
<= 1.2.15
Aug 16, 2024
Users Information Disclosure vulnerability
< 1.2.12
Aug 5, 2024
Unauthenticated SQL Injection via 'uwp_sort_by' vulnerability
<= 1.2.10
Jul 1, 2024
Cross Site Request Forgery (CSRF) vulnerability
< 1.2.6
Apr 10, 2024
Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability
<= 1.2.6
Mar 14, 2024
CSV Injection
<= 1.2.3.9
Feb 20, 2023
Authenticated (Administrator+) CSV Injection vulnerability
<= 1.2.3.9
Dec 23, 2022