Browse CVEs

MEDIUM 5.3 CVE-2023-41953 Missing Authorization vulnerability in ProfilePress Membership Team ProfilePress.This issue affects ProfilePress: from n/a through 4.13.1. Profilepress 4.13.2+ Fix from $1,6002024-12-09 MEDIUM 5.3 CVE-2023-50882 Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Le… Profilepress 4.13.3+ Fix from $1,6002024-12-09 MEDIUM 5.3 CVE-2024-11083 The ProfilePress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.15.18 via the WordPress… Profilepress 4.15.19+ Fix from $1,6002024-11-27 CRITICAL 9.8 CVE-2024-9947 The ProfilePress Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 4.11.1. This is due to insuffi… Profilepress 4.11.2+ Fix from $2,3002024-10-23 MEDIUM 5.4 CVE-2024-2861 The ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ProfilePress User Panel widget in all versions up to, and … Profilepress 4.15.9+ Fix from $1,6002024-05-23 HIGH 8.6 CVE-2023-41954 Improper Privilege Management vulnerability in ProfilePress Membership Team ProfilePress allows Privilege Escalation.This issue affects ProfilePress:… Profilepress 4.13.2+ Fix from $1,9502024-05-17 MEDIUM 5.4 CVE-2024-2867 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vul… Profilepress 4.15.5+ Fix from $1,6002024-05-02 MEDIUM 5.4 CVE-2024-3210 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vul… Profilepress 4.15.6+ Fix from $1,6002024-04-10 MEDIUM 5.4 CVE-2024-1806 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vul… Profilepress 4.15.2+ Fix from $1,6002024-03-13 MEDIUM 5.4 CVE-2024-1535 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vul… Profilepress 4.15.3+ Fix from $1,6002024-03-13 MEDIUM 5.4 CVE-2024-1409 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vul… Profilepress 4.15.1+ Fix from $1,6002024-03-13 MEDIUM 6.1 CVE-2024-1519 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vul… Profilepress 4.15.0+ Fix from $1,6002024-02-29 MEDIUM 5.4 CVE-2024-1570 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vul… Profilepress 4.15.0+ Fix from $1,6002024-02-29 MEDIUM 5.4 CVE-2024-1408 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vul… Profilepress 4.15.0+ Fix from $1,6002024-02-29 MEDIUM 5.4 CVE-2024-1046 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vul… Profilepress after 4.14.3 Fix from $1,6002024-02-05 HIGH 7.2 CVE-2022-45083 Deserialization of Untrusted Data vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, User Registration Form, Login Form… Profilepress 4.4.0+ Fix from $1,9502024-01-19 HIGH 7.5 CVE-2023-44150 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, Registrat… Profilepress 4.13.3+ Fix from $1,9502023-11-30 MEDIUM 6.1 CVE-2023-23830 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ProfilePress Membership Team ProfilePress plugin <= 4.5.4 versions. Profilepress 4.5.5+ Fix from $1,6002023-05-03 MEDIUM 5.4 CVE-2023-23820 Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ProfilePress Membership Team ProfilePress plugin <= 4.5.4 versions. Profilepress 4.5.5+ Fix from $1,6002023-05-03 MEDIUM 6.1 CVE-2022-47444 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, Registration Form, Logi… Profilepress after 4.5.3 Fix from $1,6002023-03-29 MEDIUM 6.1 CVE-2021-24522 The User Registration, User Profile, Login & Membership – ProfilePress (Formerly WP User Avatar) WordPress plugin before 3.1.11's widget for tabbed l… Profilepress 3.1.11+ Fix from $1,6002021-08-09 CRITICAL 9.8 CVE-2021-34621EPSS 69% A vulnerability in the user registration component found in the ~/src/Classes/RegistrationAuth.php file of the ProfilePress WordPress plugin made it … Profilepress after 3.1.3 Fix from $2,3002021-07-07 CRITICAL 9.8 CVE-2021-34623 A vulnerability in the image uploader component found in the ~/src/Classes/ImageUploader.php file of the ProfilePress WordPress plugin made it possib… Profilepress after 3.1.3 Fix from $2,3002021-07-07 CRITICAL 9.8 CVE-2021-34624EPSS 7% A vulnerability in the file uploader component found in the ~/src/Classes/FileUploader.php file of the ProfilePress WordPress plugin made it possible… Profilepress after 3.1.3 Fix from $2,3002021-07-07 HIGH 8.8 CVE-2021-34622 A vulnerability in the user profile update component found in the ~/src/Classes/EditUserProfile.php file of the ProfilePress WordPress plugin made it… Profilepress after 3.1.3 Fix from $1,9502021-07-07