Cross-Site Request Forgery

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. UserPro <= 5.1.1 - Cross-Site Request Forgery to Privilege EscalationCVE-2023-2440Userproplugin · CVSS 8.8 · 0.3% likely

   CWE-352

2. UserPro <= 5.1.0 - Cross-Site Request Forgery to PHP Object InjectionCVE-2023-2497Userproplugin · CVSS 8.8 · 0.3% likely

   CWE-352

3. UserPro <= 5.1.1 - Cross-Site Request Forgery to Sensitive Information ExposureCVE-2023-2447Userproplugin · CVSS 6.1 · 0.2% likely

   CWE-352

4. UserPro <= 5.1.1 - Cross-Site Request Forgery via multiple functionsCVE-2023-6008Userproplugin · CVSS 6.3 · 0.2% likely

   CWE-352

5. UserPro <= 5.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via userpro_save_userdataCVE-2023-2438Userproplugin · CVSS 6.1 · 0.2% likely

   CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.