Input validation vulnerability in UserPro – Community and User Profile WordPress Plugin 5.1.0

The UserPro plugin for WordPress is not secure in versions up to 5.1.0. This means attackers can cause harm to the website without needing to authenticate themselves. This is possible because the plugin does not have the correct measures in place to prevent malicious requests. If a website administrator clicks on a link created by an attacker, the attacker can update user information and add malicious JavaScript.