Vulnerabilities > Wpuserplus

DATE	CVE	VULNERABILITY TITLE	RISK
2024-01-16	CVE-2023-0824	Cross-Site Request Forgery (CSRF) vulnerability in Wpuserplus Userplus The User registration & user profile WordPress plugin through 2.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged-in admin add Stored XSS payloads via a CSRF attack. network low complexity wpuserplus CWE-352	6.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.

Vulnerabilities > Wpuserplus {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"Wpuserplus"}]}

Vulnerabilities > Wpuserplus