DeluxeThemes vulnerabilities

CVEs per yearBy the year they were published

1. 20245
2. 20255
3. 20261

Newest CVEs

• CVE-2025-53444

  WordPress Userpro plugin < 5.1.11 - Cross Site Request Forgery (CSRF) vulnerability

  DeluxeThemes · Userpro

  Medium4.3
• CVE-2025-68608

  WordPress Userpro plugin <= 5.1.9 - Broken Access Control vulnerability

  DeluxeThemes · Userpro

  High7.5
• CVE-2024-12822

  Media Manager for UserPro <= 3.12.0 - Missing Authorization to Unauthenticated Arbitrary Options Update

  DeluxeThemes · Media Manager for UserPro

  Critical9.8
• CVE-2024-12821

  Media Manager for UserPro <= 3.12.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

  DeluxeThemes · Media Manager for UserPro

  High8.8
• CVE-2025-22322

  WordPress Private Messages for UserPro plugin <= 4.10.0 - Reflected Cross Site Scripting (XSS) vulnerability

  DeluxeThemes · Private Messages for UserPro

  High7.1
• CVE-2025-22311

  WordPress Private Messages for UserPro plugin <= 4.10.0 - Local File Inclusion vulnerability

  DeluxeThemes · Private Messages for UserPro

  High7.5
• CVE-2024-56210

  WordPress UserPro plugin <= 5.1.9 - Reflected Cross Site Scripting (XSS) vulnerability

  DeluxeThemes · Userpro

  High7.1
• CVE-2024-56212

  WordPress UserPro plugin <= 5.1.9 - SQL Injection vulnerability

  DeluxeThemes · Userpro

  High8.5
• CVE-2024-56211

  WordPress UserPro plugin <= 5.1.9 - Authenticated Arbitrary User Meta Update vulnerability

  DeluxeThemes · Userpro

  High8.8
• CVE-2024-56214

  WordPress UserPro plugin <= 5.1.9 - Local File Inclusion vulnerability

  DeluxeThemes · Userpro

  High8.3