Product by ProfilePress Membership Team

    ProfilePress

    37 known vulnerabilities in ProfilePress (ProfilePress Membership Team), 0 of them actively exploited (CISA KEV).

    Key figures

    37

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    5

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in ProfilePress (ProfilePress Membership Team)
    CriticalCVE-2021-34621

    ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation

    also in 1 other product

    		9.8
    CriticalCVE-2021-34624

    ProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in File Uploader Component

    also in 1 other product

    		9.8
    CriticalCVE-2021-34622

    ProfilePress 3.0 - 3.1.3 - Authenticated Privilege Escalation

    also in 1 other product

    		9.8
    CriticalCVE-2021-34623

    ProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in Image Uploader Component

    also in 1 other product

    		9.8
    HighCVE-2023-41954

    WordPress ProfilePress plugin <= 4.13.1 - Unauthenticated Limited Privilege Escalation vulnerability

    also in 1 other product

    		8.6
    MediumCVE-2021-24522

    ProfilePress < 3.1.11 - Unauthenticated Cross-Site Scripting (XSS) in tabbed login/register widget

    		6.1
    HighCVE-2023-44150

    WordPress ProfilePress Plugin <= 4.13.2 is vulnerable to Sensitive Data Exposure

    also in 1 other product

    		7.5
    CriticalCVE-2024-9947

    ProfilePress - Pro <= 4.11.1 - Authentication Bypass via WordPress.com OAuth provider

    		8.1
    MediumCVE-2026-96337

    WordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerability

    		6.5
    MediumCVE-2026-96518

    WordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerability

    		5.9
    HighCVE-2022-45083

    WordPress ProfilePress Plugin <= 4.3.2 is vulnerable to PHP Object Injection

    also in 1 other product

    		6.6
    MediumCVE-2024-1408

    ProfilePress: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-1519

    ProfilePress: Cross-site Scripting

    also in 1 other product

    		6.5
    MediumCVE-2024-1535

    ProfilePress <= 4.15.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    also in 1 other product

    		6.4
    MediumCVE-2024-1806

    ProfilePress: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2022-4697

    ProfilePress <= 4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

    also in 1 other product

    		5.5
    MediumCVE-2026-41556

    WordPress ProfilePress plugin <= 4.16.13 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2022-4698

    ProfilePress <= 4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Form Settings

    also in 1 other product

    		5.5
    MediumCVE-2024-1570

    ProfilePress <= 4.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    also in 1 other product

    		6.4
    MediumCVE-2024-1409

    ProfilePress: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2023-50882

    WordPress ProfilePress plugin <= 4.13.2 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2024-3210

    ProfilePress: Cross-site Scripting

    also in 1 other product

    		6.4
    HighCVE-2023-23830

    WordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    		7.1
    HighCVE-2022-47444

    WordPress ProfilePress Plugin <= 4.4.1 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    		7.1
    MediumCVE-2023-23820

    WordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    		6.5

    All vulnerabilities in search

    All products by ProfilePress Membership Team