WordPress security by component
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for
Plugin description
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Sep 06, 2025; the highest CVE/CNA score is 6.5.
Plugin slug:
front-end-login-form-user-registration-user-profile-members-directoryLatest vulnerability
CVE-2025-10003: UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for: SQL injection
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data.
| Safe version |
|
||
|---|---|---|---|
| Sep 06, 2025 |
CVE-2025-10003
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for: SQL injection
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE6.5
NVDPending
|