Known vulnerabilities in the Users Ultra plugin
7 security advisories have been published for the Users Ultra plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Users Ultra - SQL Injection (CVE-2022-0769) CRITICAL
- Users Ultra - Arbitrary File Upload (CVE-2015-9402) HIGH
- Users Ultra - SQL Injection (CVE-2015-9395) HIGH
- Users Ultra - Cross-Site Request Forgery (CSRF) (CVE-2015-9394) HIGH
- Users Ultra - Cross-Site Scripting (XSS) (CVE-2015-9393) MEDIUM
- Users Ultra - Cross-Site Scripting (XSS) (CVE-2015-9392) MEDIUM
- Users Ultra - SQL Injection (CVE-2015-4109) HIGH