Deryck User Toolkit

• CVE-2024-50503 Critical 9.8 WordPress User Toolkit plugin <= 1.2.3 - Account Takeover vulnerability 0.5%
• CVE-2024-9890 High 8.8 User Toolkit <= 1.2.3 - Authenticated (Subscriber+) Authentication Bypass 1.1%