Unknown User Registration, User Profile, Login & Membership – ProfilePress (Formerly WP User Avatar)

• CVE-2021-24522 Unrated ProfilePress < 3.1.11 - Unauthenticated Cross-Site Scripting (XSS) in tabbed login/register widget 1.5%