CVE-2025-4187 – UserPro – Community and User Profile WordPress Plugin Directory Traversal Vulnerability

June 14, 2025

CVE ID : CVE-2025-4187

Published : June 14, 2025, 9:15 a.m. | 4 hours, 56 minutes ago

Description : The UserPro – Community and User Profile WordPress Plugin plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 5.1.10 via the userpro_fbconnect() function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.

Severity: 5.9 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-4592 – WordPress Free AI Image Generator CSRF Vulnerability

Next Article Meta Invests $14.3 Billion in Scale AI, Recruits Founder Alexandr Wang for Superintelligence Lab

Highlights

CVE-2025-4757 – PHPGurukul Beauty Parlour Management System SQL Injection Vulnerability

May 16, 2025

CVE ID : CVE-2025-4757

Published : May 16, 2025, 8:15 a.m. | 44 minutes ago

Description : A vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1. It has been rated as critical. This issue affects some unknown processing of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Severity: 7.3 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

The Ultimate Guide to Node.js Development Pricing for Enterprises

Stack Overflow: Developers’ trust in AI outputs is worsening year over year

Web Components: Working With Shadow DOM

Google’s new Opal tool allows users to create mini AI apps with no coding required

I replaced my Samsung OLED TV with this Sony Mini LED model for a week – and didn’t regret it

I tested the most popular robot mower on the market – and it was a $5,000 crash out

5 gadgets and accessories that leveled up my gaming setup (including a surprise console)

Why I’m patiently waiting for the Samsung Z Fold 8 next year (even though the foldable is already great)

Performance Analysis with Laravel’s Measurement Tools

Performance Analysis with Laravel’s Measurement Tools

Memoization and Function Caching with this PHP Package

Laracon US 2025 Livestream

Microsoft mysteriously offered a Windows 11 upgrade to this unsupported Windows 10 PC — despite it failing to meet the “non-negotiable” TPM 2.0 requirement

Microsoft mysteriously offered a Windows 11 upgrade to this unsupported Windows 10 PC — despite it failing to meet the “non-negotiable” TPM 2.0 requirement

With Windows 10’s fast-approaching demise, this Linux migration tool could let you ditch Microsoft’s ecosystem with your data and apps intact — but it’s limited to one distro

Windows 10 is 10 years old today — let’s look back at 10 controversial and defining moments in its history

CVE-2025-4187 – UserPro – Community and User Profile WordPress Plugin Directory Traversal Vulnerability

CISA Adds PaperCut NG/MF CSRF Vulnerability to KEV Catalog Amid Active Exploitation

Tea App Data Breach: 72,000 Selfies and IDs of Women Leaked Online

Compare Collection Keys with Laravel’s diffKeys Method

CVE-2025-5360 – Campcodes Online Hospital Management System SQL Injection Vulnerability

Here’s how to get a free iPhone 16 Pro from T-Mobile with no trade-in required

DeepSeek vs ChatGPT: Pros, Cons, and Key Differences Explained

CVE-2025-4757 – PHPGurukul Beauty Parlour Management System SQL Injection Vulnerability

CVE-2025-50585 – StudentManage SQL Injection Vulnerability

CVE-2025-3812 – WordPress WPBot Pro File Deletion Vulnerability

OptimusUI is a GUI for nVidia Optimus

CVE-2025-4187 – UserPro – Community and User Profile WordPress Plugin Directory Traversal Vulnerability

Related Posts