DeluxeThemes Userpro vulnerabilities

CVEs per yearBy the year they were published

1. 20245
2. 20251
3. 20261

Newest CVEs

• CVE-2025-53444

  WordPress Userpro plugin < 5.1.11 - Cross Site Request Forgery (CSRF) vulnerability

  DeluxeThemes · Userpro

  Medium4.3
• CVE-2025-68608

  WordPress Userpro plugin <= 5.1.9 - Broken Access Control vulnerability

  DeluxeThemes · Userpro

  High7.5
• CVE-2024-56210

  WordPress UserPro plugin <= 5.1.9 - Reflected Cross Site Scripting (XSS) vulnerability

  DeluxeThemes · Userpro

  High7.1
• CVE-2024-56212

  WordPress UserPro plugin <= 5.1.9 - SQL Injection vulnerability

  DeluxeThemes · Userpro

  High8.5
• CVE-2024-56211

  WordPress UserPro plugin <= 5.1.9 - Authenticated Arbitrary User Meta Update vulnerability

  DeluxeThemes · Userpro

  High8.8
• CVE-2024-56214

  WordPress UserPro plugin <= 5.1.9 - Local File Inclusion vulnerability

  DeluxeThemes · Userpro

  High8.3
• CVE-2024-35700

  WordPress UserPro plugin <= 5.1.8 - Unauthenticated Account Takeover vulnerability

  DeluxeThemes · Userpro

  Critical9.8