The UserPro plugin, a popular community and user profile tool for WordPress developed by DeluxeThemes, has been found to have a significant security vulnerability. This plugin, used by over 20,000 sites, enables users to create customizable front-end profiles and community websites.

Source: Infosecurity