Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Unknown
User Registration, User Profile, Login & Membership – Profilepress (formerly Wp User Avatar)
Unknown User Registration, User Profile, Login & Membership – Profilepress (formerly Wp User Avatar) vulnerabilities
Any severity
Critical
High or worse
Medium or worse
Low or worse
Any EPSS
EPSS 10% or more
EPSS 50% or more
EPSS 90% or more
Known exploited
In KEV
Public exploit
Fix available
Apply
properfraction
profilepress
,
unknown
user registration, user profile, login & membership – profilepress (formerly wp user avatar)
+1 more
ProfilePress < 3.1.11 - Unauthenticated Cross-Site Scripting (XSS) in tabbed login/register widget
CVE-2021-24522
6.1
Medium
August 9, 2021
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open