Login Request a demo
PR
Product
ProfilePress
by properfraction · last CVE Oct 9, 2026
37
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities37In the news0Timeline
Severity mix
Critical 4High 4Medium 28Low 1
Severity
All severities37Critical4High4Medium28Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add ProfilePress to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-9947
9.8
1%
Oct 23
ProfilePress - Pro <= 4.11.1 - Authentication Bypass via WordPress.com OAuth provider
Affected: before 4.11.2
CVE-2021-34624
9.8
8%
Jul 7
A vulnerability in the file uploader component found in the ~/src/Classes/FileUploader.php file of the ProfilePress WordPress plugin made it possible for users to upload arbitrary…
Affected: 3.0.0 through 3.1.3
CVE-2021-34623
9.8
2%
Jul 7
A vulnerability in the image uploader component found in the ~/src/Classes/ImageUploader.php file of the ProfilePress WordPress plugin made it possible for users to upload…
Affected: 3.0.0 through 3.1.3
CVE-2021-34621
9.8
69%
Jul 7
A vulnerability in the user registration component found in the ~/src/Classes/RegistrationAuth.php file of the ProfilePress WordPress plugin made it possible for users to register…
Affected: 3.0.0 through 3.1.3
Showing 4