Known CVE

WordPress UserPro 4.9.32 - Cross-Site Scripting

WordPress UserPro 4.9.32 is vulnerable to reflected cross-site scripting because the Instagram PHP API (v2) it relies on allows it via the example/success.php error_description parameter.

CVE-2019-14470

Medium2019CVSS 6.1CWE-79

cve2019 · wordpress · xss · wp-plugin · wpscan · packetstorm · instagram-php-api_project · vuln

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website