Vulnerabilities / UsersWP
UsersWP vulnerabilities
Advisories WPSec published for UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP. Other sources may list more. Its attack surface: UsersWP on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-01 | WPSEC-2026-0049 | UsersWP <= 1.2.74 - Unauthenticated Email Verification Bypass via Login | Medium 5.3 | 1.2.75 |
| 2026-10-01 | WPSEC-2026-0048 | UsersWP <= 1.2.75 - Authenticated (Subscriber+) Limited File Deletion via Avatar/Banner Image Crop | Medium 5.4 | 1.2.76 |
License: CC BY 4.0