UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP Security & Risk Analysis

The "userswp" plugin, version 1.2.57, presents a mixed security posture. While it demonstrates strengths in SQL query preparation (83%) and output escaping (87%), and has a significant number of nonce checks (50) and capability checks (36), several concerning aspects remain.

The static analysis reveals a substantial attack surface with 24 AJAX handlers, a notable 14 of which lack authentication checks. This is a significant concern, as it opens the door for unauthorized actions. Furthermore, the presence of 18 taint flows with unsanitized paths, even though none are marked as critical or high severity in the taint analysis, indicates potential for vulnerabilities if specific inputs are not handled correctly. The use of the `unserialize` function, a known risky operation, also warrants caution.

The plugin's vulnerability history, with 14 previously discovered CVEs including one critical and thirteen medium, points to a recurring pattern of security weaknesses. The types of past vulnerabilities (CSRF, Missing Authorization, XSS, Sensitive Information Exposure, SQL Injection, etc.) are common and can be severe. Although there are currently no unpatched CVEs, the historical trend suggests a need for diligent code review and patching in future versions. The last recorded vulnerability date (2026-01-28) is in the future, which is unusual and may indicate an error in the data or a placeholder.