dbcve.org
Vulnerability index

Browse CVEs

25 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6673 Adobe 6383 Ibm 6286 Cisco 5751 Debian 3919 Mozilla 2886 Apache 2864 Redhat 2586
Profilepress MEDIUM 5.3
CVE-2023-41953

Missing Authorization vulnerability in ProfilePress Membership Team ProfilePress.This issue affects ProfilePress: from n/a through 4.13.1.

Fix: 4.13.2+
Fix from $1,600 2024-12-09
Profilepress MEDIUM 5.3
CVE-2023-50882

Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Le…

Fix: 4.13.3+
Fix from $1,600 2024-12-09
Profilepress MEDIUM 5.3
CVE-2024-11083

The ProfilePress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.15.18 via the WordPress…

Fix: 4.15.19+
Fix from $1,600 2024-11-27
Profilepress CRITICAL 9.8
CVE-2024-9947

The ProfilePress Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 4.11.1. This is due to insuffi…

Fix: 4.11.2+
Fix from $2,300 2024-10-23
Profilepress MEDIUM 5.4
CVE-2024-2861

The ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ProfilePress User Panel widget in all versions up to, and …

Fix: 4.15.9+
Fix from $1,600 2024-05-23
Profilepress HIGH 8.6
CVE-2023-41954

Improper Privilege Management vulnerability in ProfilePress Membership Team ProfilePress allows Privilege Escalation.This issue affects ProfilePress:…

Fix: 4.13.2+
Fix from $1,950 2024-05-17
Profilepress MEDIUM 5.4
CVE-2024-2867

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vul…

Fix: 4.15.5+
Fix from $1,600 2024-05-02
Profilepress MEDIUM 5.4
CVE-2024-3210

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vul…

Fix: 4.15.6+
Fix from $1,600 2024-04-10
Profilepress MEDIUM 5.4
CVE-2024-1806

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vul…

Fix: 4.15.2+
Fix from $1,600 2024-03-13
Profilepress MEDIUM 5.4
CVE-2024-1535

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vul…

Fix: 4.15.3+
Fix from $1,600 2024-03-13
Profilepress MEDIUM 5.4
CVE-2024-1409

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vul…

Fix: 4.15.1+
Fix from $1,600 2024-03-13
Profilepress MEDIUM 6.1
CVE-2024-1519

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vul…

Fix: 4.15.0+
Fix from $1,600 2024-02-29
Profilepress MEDIUM 5.4
CVE-2024-1570

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vul…

Fix: 4.15.0+
Fix from $1,600 2024-02-29
Profilepress MEDIUM 5.4
CVE-2024-1408

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vul…

Fix: 4.15.0+
Fix from $1,600 2024-02-29
Profilepress MEDIUM 5.4
CVE-2024-1046

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vul…

Fix: after 4.14.3
Fix from $1,600 2024-02-05
Profilepress HIGH 7.2
CVE-2022-45083

Deserialization of Untrusted Data vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, User Registration Form, Login Form…

Fix: 4.4.0+
Fix from $1,950 2024-01-19
Profilepress HIGH 7.5
CVE-2023-44150

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, Registrat…

Fix: 4.13.3+
Fix from $1,950 2023-11-30
Profilepress MEDIUM 6.1
CVE-2023-23830

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ProfilePress Membership Team ProfilePress plugin <= 4.5.4 versions.

Fix: 4.5.5+
Fix from $1,600 2023-05-03
Profilepress MEDIUM 5.4
CVE-2023-23820

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ProfilePress Membership Team ProfilePress plugin <= 4.5.4 versions.

Fix: 4.5.5+
Fix from $1,600 2023-05-03
Profilepress MEDIUM 6.1
CVE-2022-47444

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, Registration Form, Logi…

Fix: after 4.5.3
Fix from $1,600 2023-03-29
Profilepress MEDIUM 6.1
CVE-2021-24522

The User Registration, User Profile, Login & Membership – ProfilePress (Formerly WP User Avatar) WordPress plugin before 3.1.11's widget for tabbed l…

Fix: 3.1.11+
Fix from $1,600 2021-08-09
Profilepress CRITICAL 9.8
CVE-2021-34621EPSS 69%

A vulnerability in the user registration component found in the ~/src/Classes/RegistrationAuth.php file of the ProfilePress WordPress plugin made it …

Fix: after 3.1.3
Fix from $2,300 2021-07-07
Profilepress CRITICAL 9.8
CVE-2021-34623

A vulnerability in the image uploader component found in the ~/src/Classes/ImageUploader.php file of the ProfilePress WordPress plugin made it possib…

Fix: after 3.1.3
Fix from $2,300 2021-07-07
Profilepress CRITICAL 9.8
CVE-2021-34624EPSS 7%

A vulnerability in the file uploader component found in the ~/src/Classes/FileUploader.php file of the ProfilePress WordPress plugin made it possible…

Fix: after 3.1.3
Fix from $2,300 2021-07-07
Profilepress HIGH 8.8
CVE-2021-34622

A vulnerability in the user profile update component found in the ~/src/Classes/EditUserProfile.php file of the ProfilePress WordPress plugin made it…

Fix: after 3.1.3
Fix from $1,950 2021-07-07