CVE Intelligence

DeluxeThemes Userpro vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting DeluxeThemes Userpro: 2 record(s), with affected versions and fixes.

CVE-2025-53444 Medium · 4.3 CWE-352 Apr 15, 2026
WordPress Userpro plugin < 5.1.11 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in DeluxeThemes Userpro userpro allows Cross Site Request Forgery.This issue affects Userpro: from n/a through < 5.1.11.
CVE-2025-68608 High · 7.5 CWE-862 Dec 24, 2025
WordPress Userpro plugin <= 5.1.9 - Broken Access Control vulnerability
Missing Authorization vulnerability in DeluxeThemes Userpro userpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Userpro: from n/a through <= 5.1.9.