Filtered by vendor Ayecode Subscriptions
Filtered by product Userswp Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-47442 1 Ayecode 1 Userswp 2023-11-15 8.8 High
Improper Neutralization of Formula Elements in a CSV File vulnerability in AyeCode Ltd UsersWP.This issue affects UsersWP: from n/a through 1.2.3.9.
CVE-2022-0442 1 Ayecode 1 Userswp 2023-07-20 4.3 Medium
The UsersWP WordPress plugin before 1.2.3.1 is missing access controls when updating a user avatar, and does not make sure file names for user avatars are unique, allowing a logged in user to overwrite another users avatar.