<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: deluxethemes-userpro</title><description>Every new CVE for deluxethemes-userpro.</description><link>https://agentprime.io/</link><item><title>CVE-2025-53444: WordPress Userpro plugin &lt; 5.1.11 - Cross Site Request Forgery (CSRF) vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-53444/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-53444/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 15 Apr 2026 15:43:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-68608: WordPress Userpro plugin &lt;= 5.1.9 - Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-68608/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-68608/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 24 Dec 2025 12:31:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-56210: WordPress UserPro plugin &lt;= 5.1.9 - Reflected Cross Site Scripting (XSS) vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-56210/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-56210/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 31 Dec 2024 10:32:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-56212: WordPress UserPro plugin &lt;= 5.1.9 - SQL Injection vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-56212/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-56212/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 31 Dec 2024 10:04:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-56211: WordPress UserPro plugin &lt;= 5.1.9 - Authenticated Arbitrary User Meta Update vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-56211/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-56211/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 31 Dec 2024 10:03:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-56214: WordPress UserPro plugin &lt;= 5.1.9 - Local File Inclusion vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-56214/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-56214/</guid><description>CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 31 Dec 2024 10:01:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-35700: WordPress UserPro plugin &lt;= 5.1.8 - Unauthenticated Account Takeover vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-35700/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-35700/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 04 Jun 2024 13:40:43 GMT</pubDate><category>CVE</category><category>critical</category></item></channel></rss>