Log in Start free

ProfilePress Membership Team

Products

ProductCVEsExploitedLatest
ProfilePress5–Dec 9, 2024
Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress2–Nov 30, 2023
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress1–Jan 19, 2024

Exploited and recent CVEs

  • CVE-2023-41953 Medium 5.3 WordPress ProfilePress plugin <= 4.13.1 - Broken Access Control vulnerability 0.4%
  • CVE-2023-41954 High 8.6 WordPress ProfilePress plugin <= 4.13.1 - Unauthenticated Limited Privilege Escalation vulnerability 1.4%
  • CVE-2022-45083 Medium 6.6 WordPress ProfilePress Plugin <= 4.3.2 is vulnerable to PHP Object Injection 0.6%
  • CVE-2023-44150 High 7.5 WordPress ProfilePress Plugin <= 4.13.2 is vulnerable to Sensitive Data Exposure 0.8%
  • CVE-2023-23830 High 7.1 WordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-23820 Medium 6.5 WordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-23996 Medium 5.9 WordPress ProfilePress Plugin <= 4.5.3 is vulnerable to Cross Site Scripting (XSS) 0.5%
  • CVE-2022-47444 High 7.1 WordPress ProfilePress Plugin <= 4.4.1 is vulnerable to Cross Site Scripting (XSS) 0.4%