Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: khaledsaikat Clear all filters
TI-2025-08884 CVE-2025-9693 · GHSA-46fh-vxvj-j8gp

Path traversal in khaledsaikat User Meta – User Profile Builder and User management plugin

Priority LOW 38

The User Meta – User Profile Builder and User management plugin plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the postInsertUserProcess function in all versions…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00585 Published 2025-09-11 No fix listed CWE-22
TI-2024-08598 CVE-2024-9262 · GHSA-mxr4-jxx7-rxvw

Authorization bypass in khaledsaikat User Meta – User Profile Builder and User management…

Priority LOW 29

The User Meta – User Profile Builder and User management plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.1.1 via the getUser() due to missing validati…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00415 Published 2024-11-09 No fix listed CWE-639