The UsersWP plugin for WordPress has a security issue that allows unauthorized changes to data. This is because the activation_redirect() function does not have a check to make sure only authorized users can access it. This can be exploited by attackers who are not logged in, allowing them to activate the redirect function.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
