Really Simple Security logo

Log out
Get PRO

Latest

Output validation vulnerability in UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress 1.2.3.9

  • Severity: medium-risk
  • Status: Fixed
  • Publication: December 21, 2022

The UsersWP plugin for WordPress has a security vulnerability in versions from 1.2.3.9 and lower. This vulnerability lets attackers insert malicious code into CSV files that are exported by the plugin. If someone downloads and opens these modified files on their computer

Detected in:

UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress fixed vulnerable versions: >= * <= 1.2.3.9
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.