PM
Product
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content
7
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 4Low 1
Watch
Add Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-10820 | 8.1 | Jun 27 | ProfilePress < 4.16.17 - Subscriber+ Subscription Cancellation via IDOR Affected: before 4.16.17 |
| CVE-2026-12497 | 7.5 | Jul 24 | ProfilePress < 4.16.18 - Unauthenticated Privilege Escalation via Registration Role Selection Affected: before 4.16.18 |
| CVE-2024-13120 | 4.8 | Feb 13 | ProfilePress < 4.15.20 - Admin+ Stored XSS Affected: before 4.15.20 |
| CVE-2024-13119 | 4.8 | Feb 13 | ProfilePress < 4.15.20 - Admin+ Stored XSS Affected: before 4.15.20 |
| CVE-2024-10518 | 4.8 | Dec 12 | ProfilePress < 4.15.15 - Admin+ Stored XSS Affected: before 4.15.15 |
| CVE-2024-10517 | 4.8 | Dec 12 | ProfilePress < 4.15.15 - Admin+ Stored XSS Affected: before 4.15.15 |
| CVE-2024-13121 | 3.5 | Feb 13 | Paid Membership Plugin < 4.15.20 - Admin+ Stored XSS Affected: before 4.15.20 |
Showing 7