Skip to contentProfilepress Membership Team Profilepress vulnerabilities
- profilepress membership team profilepressProfilePress < 4.17.6 - Unauthenticated Member Directory Role Restriction Bypass and User Meta DisclosureCVE-2026-1236595.3 Medium
- profilepress membership team profilepressProfilePress 4.16.13 - 4.17.3 - Subscriber+ Inactive Membership Plan Subscription via Plan-Change CheckoutCVE-2026-1236614.3 Medium
- profilepress membership team profilepressProfilePress < 4.17.6 - Unauthenticated Inactive Membership Plan Enrollment via Negative Plan IDCVE-2026-1236575.3 Medium
- profilepress membership team profilepressProfilePress < 4.17.6 - Unauthenticated Restricted Content Disclosure via REST APICVE-2026-1236565.3 Medium
- profilepress membership team profilepressWordPress ProfilePress plugin <= 4.17.7 - Content Injection vulnerabilityCVE-2026-1194734.3 Medium
- profilepress membership team profilepressWordPress ProfilePress plugin <= 4.17.7 - Content Injection vulnerabilityCVE-2026-397335.3 Medium
- profilepress membership team profilepressWordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerabilityCVE-2026-965185.9 Medium
- profilepress membership team profilepressWordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerabilityCVE-2026-963376.5 Medium
- profilepress membership team profilepressProfilePress WordPress Plugin < 4.17.2 Unauthenticated Arbitrary Plugin Installation RCECVE-2026-660479.2 Critical
- profilepress membership team profilepressProfilePress < 4.17.1 - Unauthenticated Arbitrary Shortcode Execution via Display NameCVE-2026-198486.5 Medium
- profilepress membership team profilepressWordPress ProfilePress plugin <= 4.16.13 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-415566.5 Medium
- profilepressWordPress ProfilePress plugin <= 4.13.1 - Broken Access Control vulnerabilityCVE-2023-419535.3 Medium
- profilepressWordPress ProfilePress plugin <= 4.13.2 - Broken Access Control vulnerabilityCVE-2023-508825.3 Medium
- profilepress membership team profilepressWordPress ProfilePress plugin <= 4.13.1 - Unauthenticated Limited Privilege Escalation vulnerabilityCVE-2023-419548.6 High
- profilepress membership team paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content – profilepress, properfraction profilepress +1 moreWordPress ProfilePress Plugin <= 4.3.2 is vulnerable to PHP Object InjectionCVE-2022-450836.6 Medium
- profilepress membership team paid membership plugin, ecommerce, registration form, login form, user profile & restrict content – profilepress, properfraction profilepress, profilepress user registration\, login form\, user profile \& membership +2 moreWordPress ProfilePress Plugin <= 4.13.2 is vulnerable to Sensitive Data ExposureCVE-2023-441507.5 High
- profilepress membership team profilepressWordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS)CVE-2023-238307.1 High
- profilepress membership team profilepressWordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS)CVE-2023-238206.5 Medium
- profilepress membership team profilepressWordPress ProfilePress Plugin <= 4.5.3 is vulnerable to Cross Site Scripting (XSS)CVE-2023-239965.9 Medium
- profilepress membership team paid membership plugin, ecommerce, registration form, login form, user profile & restrict content – profilepress, properfraction profilepress +1 moreWordPress ProfilePress Plugin <= 4.4.1 is vulnerable to Cross Site Scripting (XSS)CVE-2022-474447.1 High
- profilepressProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in File Uploader ComponentCVE-2021-346249.8 Critical
- profilepressProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege EscalationCVE-2021-34621Public exploitEPSS 68.9%9.8 Critical
- profilepressProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in Image Uploader ComponentCVE-2021-346239.8 Critical
- profilepressProfilePress 3.0 - 3.1.3 - Authenticated Privilege EscalationCVE-2021-346229.8 Critical