PR
Product
ProfilePress
37
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 4High 4Medium 28Low 1
Watch
Add ProfilePress to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-34622 | 8.8 | Jul 7 | A vulnerability in the user profile update component found in the ~/src/Classes/EditUserProfile.php file of the ProfilePress WordPress plugin made it possible for users to… Affected: 3.0.0 through 3.1.3 |
| CVE-2023-41954 | 8.6 | May 17 | WordPress ProfilePress plugin <= 4.13.1 - Unauthenticated Limited Privilege Escalation vulnerability Affected: before 4.13.2 |
| CVE-2023-44150 | 7.5 | Nov 30 | WordPress ProfilePress Plugin <= 4.13.2 is vulnerable to Sensitive Data Exposure Affected: before 4.13.3 |
| CVE-2022-45083 | 7.2 | Jan 19 | WordPress ProfilePress Plugin <= 4.3.2 is vulnerable to PHP Object Injection Affected: before 4.4.0 |
Showing 4