WordPress Profilepress Vulnerabilities
Wordpress Profilepress vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Cross-Site Scripting Vulnerability in ProfilePress by WP User Avatar
CVE-2026-39733WordPressProfilepress5.3MEDIUMArbitrary Shortcode Execution Vulnerability in WP User Avatar / ProfilePress WordPress Plugin
CVE-2026-104003WordPressPaid Membership Plugin...5.4MEDIUMAuthorization Flaw in ProfilePress Affects User Avatar Functionality
CVE-2026-96337WordPressProfilepress6.5MEDIUMAccess Control Vulnerability in ProfilePress by ProperFraction
CVE-2026-96518WordPressProfilepress5.9MEDIUMReflected Cross-Site Scripting in ProfilePress Plugin for WordPress
CVE-2026-92551WordPressPaid Membership Plugin...6.1MEDIUMSensitive Information Exposure in ProfilePress Plugin for WordPress
CVE-2026-92536WordPressPaid Membership Plugin...8.8HIGHArbitrary Shortcode Execution in ProfilePress Plugin for WordPress
CVE-2026-85658WordPressPaid Membership Plugin...8.1HIGHRemote Code Execution Vulnerability in ProfilePress WordPress Plugin by ProfilePress
CVE-2026-66047WordPressProfilepress9.2CRITICALShortcode Execution Vulnerability in ProfilePress Plugin for WordPress
CVE-2026-19848WordPressProfilepress👾🟡6.5MEDIUMArbitrary Shortcode Execution Vulnerability in ProfilePress Plugin for WordPress
CVE-2026-18385WordPressPaid Membership Plugin...5.4MEDIUMArbitrary File Upload Vulnerability in ProfilePress Plugin for WordPress
CVE-2026-13352WordPressPaid Membership Plugin...8.8HIGHCross Site Scripting Vulnerability in ProfilePress by WordPress
CVE-2026-41556WordPressProfilepress6.5MEDIUMMissing Authorization Vulnerability in ProfilePress Plugin for WordPress
CVE-2026-4949WordPressPaid Membership Plugin...4.3MEDIUMArbitrary Shortcode Execution in ProfilePress Plugin for WordPress
CVE-2026-3309WordPressPaid Membership Plugin...6.5MEDIUMUnauthorized Membership Payment Bypass in ProfilePress Plugin for WordPress
CVE-2026-3445WordPressPaid Membership Plugin...7.1HIGHInsecure Direct Object Reference in ProfilePress Plugin by WordPress
CVE-2026-3453WordPressPaid Membership Plugin...8.1HIGHArbitrary Shortcode Execution in ProfilePress Plugin for WordPress
CVE-2025-13642WordPressPaid Membership Plugin...5.4MEDIUMArbitrary Shortcode Execution in ProfilePress Plugin for WordPress
CVE-2025-8878WordPressPaid Membership Plugin...6.5MEDIUMProfilePress Membership Team ProfilePress Vulnerable to Missing Authorization
CVE-2023-41953WordPressProfilepress5.3MEDIUMWordPress ProfilePress plugin <= 4.13.2 - Broken Access Control vulnerability
CVE-2023-50882WordPressProfilepress5.3MEDIUMUnauthenticated Attackers Can Extract Sensitive Data via WordPress Core Search
CVE-2024-11083WordPressPaid Membership Plugin...5.3MEDIUMAuthenticatiom Bypass Vulnerability in ProfilePress Pro Plugin for WordPress
CVE-2024-9947WordPressProfilepress Pro8.1HIGHStored Cross-Site Scripting Vulnerability in ProfilePress Plugin
CVE-2024-2861WordPressPaid Membership Plugin...6.4MEDIUMPrivilege Escalation Vulnerability Affects ProfilePress Membership Team ProfilePress
CVE-2023-41954WordPressProfilepress8.6HIGHStored Cross-Site Scripting in ProfilePress by WPExperts
CVE-2024-2867WordPressPaid Membership Plugin...6.4MEDIUM