Product by Profilepress Membership Team

    Profilepress

    8 known vulnerabilities in Profilepress (Profilepress Membership Team), 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Profilepress (Profilepress Membership Team)
    HighCVE-2023-41954

    WordPress ProfilePress plugin <= 4.13.1 - Unauthenticated Limited Privilege Escalation vulnerability

    also in 1 other product

    		8.6
    HighCVE-2023-44150

    WordPress ProfilePress Plugin <= 4.13.2 is vulnerable to Sensitive Data Exposure

    also in 2 other products

    		7.5
    HighCVE-2022-45083

    WordPress ProfilePress Plugin <= 4.3.2 is vulnerable to PHP Object Injection

    also in 2 other products

    		6.6
    HighCVE-2023-23830

    WordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    		7.1
    HighCVE-2022-47444

    WordPress ProfilePress Plugin <= 4.4.1 is vulnerable to Cross Site Scripting (XSS)

    also in 2 other products

    		7.1
    MediumCVE-2023-23820

    WordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    		6.5
    MediumCVE-2023-23996

    WordPress ProfilePress Plugin <= 4.5.3 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    		5.9
    MediumCVE-2023-41953

    WordPress ProfilePress plugin <= 4.13.1 - Broken Access Control vulnerability

    also in 1 other product

    		5.3

    All products by Profilepress Membership Team