User Local Inc UserHeat Plugin vulnerabilities

Latest User Local Inc UserHeat Plugin CVEs

Newest publication first

1. CVE-2023-47553 WordPress UserHeat Plugin Plugin <= 1.1.6 is vulnerable to Cross Site Request Forgery (CSRF)

   Published 2023-11-18

   High·CVSS 8.8 EPSS 0.29%

   Cross-Site Request Forgery (CSRF) vulnerability in User Local Inc UserHeat Plugin.This issue affects UserHeat Plugin: from n/a through 1.1.6.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.