WordPress User Meta Vulnerabilities
Wordpress User Meta vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Stored Cross-Site Scripting Vulnerability in Simple User Meta Editor Plugin for WordPress
CVE-2025-14888WordPressSimple User Meta Editor4.4MEDIUMArbitrary File Deletion in User Profile Builder Plugin for WordPress
CVE-2025-9693WordPressUser Meta – User Profi...8HIGHCross-Site Request Forgery in Add User Meta Plugin for WordPress
CVE-2025-7688WordPressAdd User Meta6.1MEDIUMCross-site Scripting Vulnerability in Khaled User Meta Plugin
CVE-2025-47611WordPressUser Meta7.1HIGHCross-Site Request Forgery Vulnerability in User Profile Meta Manager by Danny Vink
CVE-2025-48340WordPressUser Profile Meta Manager9.8CRITICALVulnerability in User Meta Plugin Allows Attackers to Obtain User Meta Values
CVE-2024-9262WordpressUser Meta – User Profi...6.5MEDIUMFreemius SDK Vulnerabilities Affect Hundreds of WordPress Plugins and Themes
CVE-2022-4974WordpressYasr – Yet Another Sta...6.3MEDIUMStored Cross-Site Scripting Vulnerability in Display Post Metadata Plugin for WordPress
CVE-2023-1661WordpressDisplay post meta, ter...5.4MEDIUMWordPress User Meta Manager Plugin <= 3.4.9 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-23712WordPressUser Meta Manager8.8HIGHWordPress User Meta Manager Plugin <= 3.4.9 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-22718WordPressUser Meta Manager6.1MEDIUMUser Meta < 2.4.4 - Subscriber+ Local File Enumeration via Path Traversal
CVE-2022-0779WordpressUser Meta – User Profi...EPSS 13%6.5MEDIUMUser Meta < 2.4.3 - Admin+ Stored Cross-Site Scripting
CVE-2022-0376WordpressUser Meta – User Profi...4.8MEDIUMUser Meta Shortcodes <= 0.5 - Contributor+ Unauthorized Arbitrary User Metadata Access
CVE-2021-24859WordpressUser Meta Shortcodes4.3MEDIUMExport Users With Meta < 0.6.5 - Authenticated SQL Injection
CVE-2021-24451WordpressExport Users With Meta7.2HIGHDirectory Traversal Vulnerability in Import Users from CSV with Meta Plugin for WordPress
CVE-2019-15326WordpressImport Users From Csv ...7.5HIGHXSS Vulnerability in Import Users from CSV with Meta Plugin for WordPress
CVE-2019-15327WordpressImport Users From Csv ...6.1MEDIUMCross-Site Scripting Vulnerability in Import Users from CSV with Meta Plugin for WordPress
CVE-2019-15328WordpressImport Users From Csv ...6.1MEDIUMCSRF Vulnerability in Import Users from CSV with Meta Plugin for WordPress
CVE-2019-15329WordpressImport Users From Csv ...8.8HIGHCross-Site Request Forgery Vulnerability in Import Users from CSV with Meta Plugin for WordPress
CVE-2019-14683WordpressImport Users From Csv ...5.7MEDIUMCross-Site Scripting Risk in Import Users from CSV with Meta Plugin for WordPress
CVE-2018-20101WordpressImport Users From Csv ...6.1MEDIUM