Unknown Profilepress vulnerabilities

• profilepress membership team profilepress ProfilePress < 4.17.1 - Unauthenticated Arbitrary Shortcode Execution via Display Name CVE-2026-19848 6.5 MediumAugust 21, 2026
• profilepress user registration\, login form\, user profile \& membership, unknown user registration, login form, user profile & membership – profilepress (formerly wp user avatar) +1 more ProfilePress < 3.2.3 - Reflected Cross-Site Scripting CVE-2021-24955 6.1 MediumDecember 13, 2021
• profilepress user registration\, login form\, user profile \& membership, unknown user registration, login form, user profile & membership – profilepress (formerly wp user avatar) +1 more ProfilePress < 3.2.3 - Reflected Cross-Site Scripting CVE-2021-24954 6.1 MediumDecember 13, 2021
• properfraction profilepress, unknown user registration, user profile, login & membership – profilepress (formerly wp user avatar) +1 more ProfilePress < 3.1.11 - Unauthenticated Cross-Site Scripting (XSS) in tabbed login/register widget CVE-2021-24522 6.1 MediumAugust 9, 2021
• properfraction profilepress, unknown user registration, user profiles, login & membership – profilepress (formerly wp user avatar) +1 more ProfilePress < 3.1.8 - Authenticated Stored XSS CVE-2021-24450 4.8 MediumAugust 2, 2021