PeproDev Ultimate Profile Solutions

Vulnerabilities 3Slug peprodev-upsLatest version 8.0.4WordPress.org →

Minimum safe version

8.0.0

Update to 8.0.0 or later to address 1 fixable vulnerability

Latest available8.0.4 Affected up to7.5.2
Critical 9.8
2025-05-07≥ 1.9.1 and < 8.0.0

PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Authentication Bypass to Account Takeover

Medium 5.3
2025-05-07≥ 1.9.1 and ≤ 7.5.2

PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Missing Authorization to Unauthenticated Email Enumeration

High 8.2
2025-05-07≥ 1.9.1 and ≤ 7.5.2

PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Missing Authorization to Limited Unauthenticated Arbitrary User Meta Update via handel_ajax_req Function