Log in Start free

DeluxeThemes

Products

ProductCVEsExploitedLatest
Userpro7–Apr 15, 2026
Media Manager for UserPro2–Jan 30, 2025
Private Messages for UserPro2–Jan 21, 2025

Exploited and recent CVEs

  • CVE-2025-53444 Medium 4.3 WordPress Userpro plugin < 5.1.11 - Cross Site Request Forgery (CSRF) vulnerability <0.1%
  • CVE-2025-68608 High 7.5 WordPress Userpro plugin <= 5.1.9 - Broken Access Control vulnerability 0.2%
  • CVE-2024-12822 Critical 9.8 Media Manager for UserPro <= 3.12.0 - Missing Authorization to Unauthenticated Arbitrary Options Update 0.6%
  • CVE-2024-12821 High 8.8 Media Manager for UserPro <= 3.12.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update 0.4%
  • CVE-2025-22322 High 7.1 WordPress Private Messages for UserPro plugin <= 4.10.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-22311 High 7.5 WordPress Private Messages for UserPro plugin <= 4.10.0 - Local File Inclusion vulnerability 0.6%
  • CVE-2024-56210 High 7.1 WordPress UserPro plugin <= 5.1.9 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-56212 High 8.5 WordPress UserPro plugin <= 5.1.9 - SQL Injection vulnerability 0.4%
  • CVE-2024-56211 High 8.8 WordPress UserPro plugin <= 5.1.9 - Authenticated Arbitrary User Meta Update vulnerability 0.4%
  • CVE-2024-56214 High 8.3 WordPress UserPro plugin <= 5.1.9 - Local File Inclusion vulnerability 0.4%
  • CVE-2024-35700 Critical 9.8 WordPress UserPro plugin <= 5.1.8 - Unauthenticated Account Takeover vulnerability 0.5%