Medium 4.3
2026-04-15< 5.1.11
CVE-2025-53444
UserPro
Minimum safe version
5.1.11
Update to 5.1.11 or later to address 21 fixable vulnerabilities
⚠ 6 vulnerabilities have no fix
High 7.5 Unfixed
2025-12-25≤ 5.1.9
Userpro <= 5.1.9 - Missing Authorization
Medium 5.9 Unfixed
2025-06-14≤ 5.1.10
UserPro - Community and User Profile WordPress Plugin <= 5.1.10 - Unauthenticated Arbitrary File Read
High 8.3 Unfixed
2024-12-31≤ 5.1.9
WordPress UserPro plugin <= 5.1.9 - Local File Inclusion vulnerability
High 8.8 Unfixed
2024-12-31≤ 5.1.9
WordPress UserPro plugin <= 5.1.9 - Authenticated Arbitrary User Meta Update vulnerability
High 7.1 Unfixed
2024-12-31≤ 5.1.9
WordPress UserPro plugin <= 5.1.9 - Reflected Cross Site Scripting (XSS) vulnerability
High 8.5 Unfixed
2024-12-31≤ 5.1.9
WordPress UserPro plugin <= 5.1.9 - SQL Injection vulnerability
Critical 9.8
2024-06-04< 5.1.9
CVE-2024-35700
Medium 5.4
2024-01-31< 5.1.6
CVE-2023-2439
Medium 5.3
2024-02-05< 5.1.7
CVE-2024-0701
High 8.8
2023-11-22< 5.1.1
CVE-2023-2497
Medium 4.3
2023-11-22< 5.1.2
CVE-2023-6008
High 8.1
2023-11-22< 5.1.2
CVE-2023-2437
Medium 6.5
2023-11-22< 5.1.2
CVE-2023-2446
Medium 6.1
2023-11-22< 5.1.1
CVE-2023-2438
Medium 5.3
2023-11-22< 5.1.5
CVE-2023-2448
Medium 6.1
2023-11-22< 5.1.2
CVE-2023-2447
High 8.8
2023-11-22< 5.1.2
CVE-2023-2440
Medium 6.5
2023-11-22< 5.1.2
CVE-2023-6007
High 8.8
2023-11-22< 5.1.5
CVE-2023-6009
Critical 9.8
2023-11-22< 5.1.2
CVE-2023-2449
N/A
2018-09-10< 4.9.28
UserPro <= 4.9.27 - Privilege Escalation
N/A
2019-01-03< 4.9.21
UserPro <= 4.9.20 - Privilege Escalation
N/A
2017-11-04< 4.9.17.1
WordPress Userpro plugin <= 4.9.17.1 - Authentication Bypass Vulnerability
Critical 9.8
2017-11-10< 4.9.17.1
UserPro <= 4.9.17 - Authentication Bypass
Medium 6.1
2018-09-09< 4.9.24
WordPress UserPro premium plugin <= 4.9.23 - Cross-Site Scripting (XSS) vulnerability
Medium 6.1
2019-09-04< 4.9.35.1
CVE-2019-14470