Profilepress vulnerabilities

Products

• Profilepress 7
• Loginwp 4
• User Registration\, Login Form\, User Profile \& Membership 3

Newest

• profilepress WordPress ProfilePress plugin <= 4.13.1 - Broken Access Control vulnerability CVE-2023-41953 5.3 MediumDecember 9, 2024
• profilepress WordPress ProfilePress plugin <= 4.13.2 - Broken Access Control vulnerability CVE-2023-50882 5.3 MediumDecember 9, 2024
• properfraction profilepress, profilepress loginwp, properfraction paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content – profilepress +2 more ProfilePress <= 4.15.18 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure CVE-2024-11083 5.3 MediumNovember 27, 2024
• profilepress, profilepress team pro +1 more ProfilePress - Pro <= 4.11.1 - Authentication Bypass via WordPress.com OAuth provider CVE-2024-9947 8.1 HighOctober 23, 2024
• profilepress membership team paid membership plugin, ecommerce, registration form, login form, user profile & restrict content – profilepress, properfraction profilepress, profilepress user registration\, login form\, user profile \& membership +2 more WordPress ProfilePress Plugin <= 4.13.2 is vulnerable to Sensitive Data Exposure CVE-2023-44150 7.5 HighNovember 30, 2023
• profilepress user registration\, login form\, user profile \& membership, unknown user registration, login form, user profile & membership – profilepress (formerly wp user avatar) +1 more ProfilePress < 3.2.3 - Reflected Cross-Site Scripting CVE-2021-24955 6.1 MediumDecember 13, 2021
• profilepress user registration\, login form\, user profile \& membership, unknown user registration, login form, user profile & membership – profilepress (formerly wp user avatar) +1 more ProfilePress < 3.2.3 - Reflected Cross-Site Scripting CVE-2021-24954 6.1 MediumDecember 13, 2021
• profilepress loginwp, unknown loginwp (formerly peter's login redirect) +1 more LoginWP < 3.0.0.5 - Reflected Cross-Site Scripting CVE-2021-24939 6.1 MediumDecember 6, 2021
• profilepress ProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in File Uploader Component CVE-2021-34624 9.8 CriticalJuly 7, 2021
• profilepress ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation CVE-2021-34621 Public exploit EPSS 68.9% 9.8 CriticalJuly 7, 2021
• profilepress ProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in Image Uploader Component CVE-2021-34623 9.8 CriticalJuly 7, 2021
• profilepress ProfilePress 3.0 - 3.1.3 - Authenticated Privilege Escalation CVE-2021-34622 9.8 CriticalJuly 7, 2021
• profilepress loginwp The peters-login-redirect plugin before 2.9.1 for WordPress has XSS during the editing of... CVE-2016-10925 6.1 MediumAugust 22, 2019
• profilepress loginwp The peters-login-redirect plugin before 2.9.2 for WordPress has CSRF. CVE-2019-15115 8.8 HighAugust 16, 2019