{"items":[{"id":"CVE-2024-52442","published":"2024-11-20T11:56:18.331Z","updated":"2026-05-11T22:15:02.832Z","title":"WordPress UserPlus plugin <= 2.0 - Privilege Escalation vulnerability","severity":"CRITICAL","score":9.8,"vendor":"userplus","product":"UserPlus","kev":false,"epss":0.00502,"kevAdded":null,"exploit":true},{"id":"CVE-2024-9520","published":"2024-10-10T02:06:13.172Z","updated":"2026-04-08T17:30:10.482Z","title":"UserPlus <= 2.0 - Missing Authorization via Multiple Functions","severity":"MEDIUM","score":6.3,"vendor":"userplus","product":"User registration & user profile – UserPlus","kev":false,"epss":0.00338,"kevAdded":null,"exploit":false},{"id":"CVE-2024-9518","published":"2024-10-10T02:06:05.859Z","updated":"2026-04-08T16:42:13.072Z","title":"UserPlus <= 2.0 - Unauthenticated Privilege Escalation","severity":"CRITICAL","score":9.8,"vendor":"userplus","product":"User registration & user profile – UserPlus","kev":false,"epss":0.00522,"kevAdded":null,"exploit":false},{"id":"CVE-2024-9519","published":"2024-10-10T02:06:03.574Z","updated":"2026-04-08T16:36:14.743Z","title":"UserPlus <= 2.0 - Authenticated (Editor+) Registration Form Update to Privilege Escalation","severity":"HIGH","score":7.2,"vendor":"userplus","product":"User registration & user profile – UserPlus","kev":false,"epss":0.00466,"kevAdded":null,"exploit":false}]}