agentprime: userpro-community-and-user-profile-wordpress-pluginEvery new CVE for userpro-community-and-user-profile-wordpress-plugin.https://agentprime.io/CVE-2025-4187: UserPro - Community and User Profile WordPress Plugin <= 5.1.10 - Unauthenticated Arbitrary File Readhttps://agentprime.io/advisories/CVE-2025-4187/https://agentprime.io/advisories/CVE-2025-4187/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 14 Jun 2025 08:23:23 GMTCVECVE-2024-0701: UserPro <= 5.1.6 - Disabled Membership Registration Bypasshttps://agentprime.io/advisories/CVE-2024-0701/https://agentprime.io/advisories/CVE-2024-0701/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Feb 2024 21:22:04 GMTCVECVE-2023-2439: The UserPro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'userpro' shortcode in versions up to, and including, 5.1.5 due to insufficient input sanitization and output esc…https://agentprime.io/advisories/CVE-2023-2439/https://agentprime.io/advisories/CVE-2023-2439/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 31 Jan 2024 02:35:10 GMTCVECVE-2023-2497: UserPro <= 5.1.0 - Cross-Site Request Forgery to PHP Object Injectionhttps://agentprime.io/advisories/CVE-2023-2497/https://agentprime.io/advisories/CVE-2023-2497/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Nov 2023 15:33:39 GMTCVECVE-2023-6008: UserPro <= 5.1.1 - Cross-Site Request Forgery via multiple functionshttps://agentprime.io/advisories/CVE-2023-6008/https://agentprime.io/advisories/CVE-2023-6008/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Nov 2023 15:33:38 GMTCVECVE-2023-6009: UserPro <= 5.1.4 - Authenticated (Subscriber+) Privilege Escalationhttps://agentprime.io/advisories/CVE-2023-6009/https://agentprime.io/advisories/CVE-2023-6009/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Nov 2023 15:33:37 GMTCVECVE-2023-2449: UserPro <= 5.1.1 - Insecure Password Reset Mechanismhttps://agentprime.io/advisories/CVE-2023-2449/https://agentprime.io/advisories/CVE-2023-2449/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Nov 2023 15:33:36 GMTCVEcriticalCVE-2023-2437: UserPro <= 5.1.1 - Authentication Bypass to Administratorhttps://agentprime.io/advisories/CVE-2023-2437/https://agentprime.io/advisories/CVE-2023-2437/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Nov 2023 15:33:33 GMTCVEcriticalCVE-2023-2438: UserPro <= 5.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via userpro_save_userdatahttps://agentprime.io/advisories/CVE-2023-2438/https://agentprime.io/advisories/CVE-2023-2438/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Nov 2023 15:33:29 GMTCVECVE-2023-2448: UserPro <= 5.1.4 - Missing Authorization to Arbitrary Shortcode Execution via userpro_shortcode_templatehttps://agentprime.io/advisories/CVE-2023-2448/https://agentprime.io/advisories/CVE-2023-2448/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Nov 2023 15:33:29 GMTCVECVE-2023-2440: UserPro <= 5.1.1 - Cross-Site Request Forgery to Privilege Escalationhttps://agentprime.io/advisories/CVE-2023-2440/https://agentprime.io/advisories/CVE-2023-2440/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Nov 2023 15:33:27 GMTCVECVE-2023-6007: UserPro <= 5.1.1 - Missing Authorization via multiple functionshttps://agentprime.io/advisories/CVE-2023-6007/https://agentprime.io/advisories/CVE-2023-6007/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Nov 2023 15:33:25 GMTCVECVE-2023-2446: UserPro <= 5.1.1 - Sensitive Information Disclosure via Shortcodehttps://agentprime.io/advisories/CVE-2023-2446/https://agentprime.io/advisories/CVE-2023-2446/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Nov 2023 07:32:12 GMTCVECVE-2023-2447: UserPro <= 5.1.1 - Cross-Site Request Forgery to Sensitive Information Exposurehttps://agentprime.io/advisories/CVE-2023-2447/https://agentprime.io/advisories/CVE-2023-2447/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Nov 2023 07:32:11 GMTCVE