Login Request a demo
US
Product
UsersWP
by Stiofan · last CVE Oct 9, 2026
5
CVEs
0
On KEV
7.1
Max CVSS
2
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 1Medium 4Low 0
Severity
All severities5Critical0High1Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add UsersWP to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-103086
6.5
0%
Oct 5
WordPress UsersWP plugin <= 1.2.74 - Broken Access Control vulnerability
Affected: through 1.2.74
CVE-2025-66072
5.3
0%
Nov 21
WordPress UsersWP plugin <= 1.2.47 - Broken Access Control vulnerability
Affected: through 1.2.47
CVE-2026-25015
4.3
0%
Feb 3
WordPress UsersWP plugin <= 1.2.53 - Cross Site Request Forgery (CSRF) vulnerability
Affected: through 1.2.53
CVE-2025-67593
4.3
0%
Dec 9
WordPress UsersWP plugin <= 1.2.48 - Cross Site Request Forgery (CSRF) vulnerability
Affected: through 1.2.48
Showing 4