Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress vulnerabilities

Product

Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress

by ProfilePress Membership Team · last CVE Nov 30, 2023

CVEs

On KEV

7.5

Max CVSS

New 30D

Vulnerabilities2 In the news0 Timeline

Severity mix

Critical 0High 1Medium 1Low 0

Severity

All severities2 Critical0 High1 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-44150	7.5	1%	Nov 30	WordPress ProfilePress Plugin <= 4.13.2 is vulnerable to Sensitive Data Exposure Affected: through 4.13.2
CVE-2022-47444	6.1	0%	Mar 29	WordPress ProfilePress Plugin <= 4.4.1 is vulnerable to Cross Site Scripting (XSS) Affected: through 4.5.3