Skip to contentProperfraction vulnerabilities
Newest
- proper fraction llc. admin bar & dashboard access control, properfraction admin bar \& dashboard access control +1 moreWordPress Admin Bar & Dashboard Access Control Plugin <= 1.2.8 is vulnerable to Cross Site Scripting (XSS)CVE-2023-471845.9 Medium
- profilepress membership team profilepressWordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS)CVE-2023-238307.1 High
- profilepress membership team profilepressWordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS)CVE-2023-238206.5 Medium
- profilepress membership team profilepressWordPress ProfilePress Plugin <= 4.5.3 is vulnerable to Cross Site Scripting (XSS)CVE-2023-239965.9 Medium
- mailoptinWordPress MailOptin Plugin <= 1.2.54.0 is vulnerable to Cross Site Scripting (XSS)CVE-2023-239805.9 Medium
- profilepress membership team paid membership plugin, ecommerce, registration form, login form, user profile & restrict content – profilepress, properfraction profilepress +1 moreWordPress ProfilePress Plugin <= 4.4.1 is vulnerable to Cross Site Scripting (XSS)CVE-2022-474447.1 High
- properfraction profilepress, paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content – profilepress +1 moreProfilePress <= 4.5.0 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2022-46975.5 Medium
- properfraction profilepress, paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content – profilepress +1 moreProfilePress <= 4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Form SettingsCVE-2022-46985.5 Medium
- properfraction profilepress, unknown user registration, user profile, login & membership – profilepress (formerly wp user avatar) +1 moreProfilePress < 3.1.11 - Unauthenticated Cross-Site Scripting (XSS) in tabbed login/register widgetCVE-2021-245226.1 Medium
- properfraction profilepress, unknown user registration, user profiles, login & membership – profilepress (formerly wp user avatar) +1 moreProfilePress < 3.1.8 - Authenticated Stored XSSCVE-2021-244504.8 Medium
- profilepressProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in File Uploader ComponentCVE-2021-346249.8 Critical
- profilepressProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege EscalationCVE-2021-34621Public exploitEPSS 68.9%9.8 Critical
- profilepressProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in Image Uploader ComponentCVE-2021-346239.8 Critical
- profilepressProfilePress 3.0 - 3.1.3 - Authenticated Privilege EscalationCVE-2021-346229.8 Critical