DeluxeThemes CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM DeluxeThemes CVE published 2026-04-15

CVE-2025-53444

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Userpro plugin for WordPress, affecting versions from n/a through < 5.1.11. This issue, tracked as CVE-2025-53444, has a CVSS score of 4.3 and is classified as MEDIUM severity. The vulnerability allows for Cross Site Request Forgery. Defenders should verify exposure, assess impact, and consider upgrading or implementing mitigations. Further v [truncated]