https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 14:17:12 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-283477 EUVD-2026-283477 https://cve.radiocsirt.org/vuln/euvd-2026-283477 https://cve.radiocsirt.org/vuln/fkie_cve-2023-2446 <p>The UserPro plugin for WordPress is vulnerable to sensitive information disclosure via the &#39;userpro&#39; shortcode in versions up to, and including 5.1.1. This is due to insufficient restriction on sensitive user meta values that can be called via that shortcode. This makes it possible for authenticated attackers, with subscriber-level permissions, and above to retrieve sensitive user meta that can be used to gain access to a high privileged user account.</p> <p>The UserPro plugin for WordPress is vulnerable to sensitive information disclosure via the &#39;userpro&#39; shortcode in versions up to, and including 5.1.1. This is due to insufficient restriction on sensitive user meta values that can be called via that shortcode. This makes it possible for authenticated attackers, with subscriber-level permissions, and above to retrieve sensitive user meta that can be used to gain access to a high privileged user account.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-2446 https://cve.radiocsirt.org/vuln/ghsa-g86m-gmqj-jhhp <p>The UserPro plugin for WordPress is vulnerable to sensitive information disclosure via the &#39;userpro&#39; shortcode in versions up to, and including 5.1.1. This is due to insufficient restriction on sensitive user meta values that can be called via that shortcode. This makes it possible for authenticated attackers, with subscriber-level permissions, and above to retrieve sensitive user meta that can be used to gain access to a high privileged user account.</p> <p>The UserPro plugin for WordPress is vulnerable to sensitive information disclosure via the &#39;userpro&#39; shortcode in versions up to, and including 5.1.1. This is due to insufficient restriction on sensitive user meta values that can be called via that shortcode. This makes it possible for authenticated attackers, with subscriber-level permissions, and above to retrieve sensitive user meta that can be used to gain access to a high privileged user account.</p> https://cve.radiocsirt.org/vuln/ghsa-g86m-gmqj-jhhp https://cve.radiocsirt.org/vuln/gsd-2023-2446 gsd-2023-2446 https://cve.radiocsirt.org/vuln/gsd-2023-2446