Stiofan UsersWP vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Stiofan UsersWP: 5 record(s), with affected versions and fixes.
CVE-2026-94641
High · 7.1
CWE-79 Oct 9, 2026
WordPress UsersWP plugin <= 1.2.73 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan UsersWP userswp allows Reflected XSS.This issue affects UsersWP: from n/a through 1.2.73.
CVE-2026-103086
Medium · 6.5
CWE-862 Oct 5, 2026
WordPress UsersWP plugin <= 1.2.74 - Broken Access Control vulnerability
Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UsersWP: from n/a through 1.2.74.
CVE-2026-25015
Medium · 4.3
CWE-352 Feb 3, 2026
WordPress UsersWP plugin <= 1.2.53 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Stiofan UsersWP userswp allows Cross Site Request Forgery.This issue affects UsersWP: from n/a through <= 1.2.53.
CVE-2025-67593
Medium · 4.3
CWE-352 Dec 9, 2025
WordPress UsersWP plugin <= 1.2.48 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Stiofan UsersWP userswp allows Cross Site Request Forgery.This issue affects UsersWP: from n/a through <= 1.2.48.
CVE-2025-66072
Medium · 5.3
CWE-862 Nov 21, 2025
WordPress UsersWP plugin <= 1.2.47 - Broken Access Control vulnerability
Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UsersWP: from n/a through <= 1.2.47.