plugin
2 known security issues reported for the Wp User Profiles WordPress plugin. Most recent disclosed Apr 10, 2025.
Running Wp User Profiles on your site? Check whether your installed version is affected.
Scan your site free[en] Incorrect Privilege Assignment vulnerability in NotFound WP User Profiles allows Privilege Escalation. This issue affects WP User Profiles: from n/a through 2.6.2.
The WP User Profiles plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.6.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update their privileges to that of an administrator.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free