PR
Vendor
Profilepress
10
CVEs
0
On KEV
0
New 30D
Products
LO8.8
Loginwp
Profilepress
4 CVEs0 on KEV0 new
PR9.8
Profilepress
Profilepress
3 CVEs0 on KEV0 new
UR7.5
User Registration, Login Form, User Profile & Membership
Profilepress
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-41953 | PR Profilepress Profilepress | 5.3 | Dec 9 | WordPress ProfilePress plugin <= 4.13.1 - Broken Access Control vulnerability |
| CVE-2023-50882 | PR Profilepress Profilepress | 5.3 | Dec 9 | WordPress ProfilePress plugin <= 4.13.2 - Broken Access Control vulnerability |
| CVE-2024-11083 | LO Loginwp Profilepress | 5.3 | Nov 27 | ProfilePress <= 4.15.18 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure |
| CVE-2024-9947 | PR Profilepress Profilepress | 9.8 | Oct 23 | ProfilePress - Pro <= 4.11.1 - Authentication Bypass via WordPress.com OAuth provider |
| CVE-2023-44150 | UR User Registration\, Login Form\, User Profile \& Membership Profilepress | 7.5 | Nov 30 | WordPress ProfilePress Plugin <= 4.13.2 is vulnerable to Sensitive Data Exposure |
| CVE-2021-24955 | UR User Registration, Login Form, User Profile & Membership Profilepress | 6.1 | Dec 13 | The User Registration, Login Form, User Profile & Membership WordPress plugin before 3.2.3 does not escape the data parameter of the pp_get_forms_by_builder_type AJAX action… |
| CVE-2021-24954 | UR User Registration, Login Form, User Profile & Membership Profilepress | 6.1 | Dec 13 | The User Registration, Login Form, User Profile & Membership WordPress plugin before 3.2.3 does not sanitise and escape the ppress_cc_data parameter before outputting it back in… |
| CVE-2021-24939 | LO Loginwp Profilepress | 6.1 | Dec 6 | The LoginWP (Formerly Peter's Login Redirect) WordPress plugin before 3.0.0.5 does not sanitise and escape the rul_login_url and rul_logout_url parameter before outputting them… |
| CVE-2016-10925 | LO Loginwp Profilepress | 6.1 | Aug 22 | The peters-login-redirect plugin before 2.9.1 for WordPress has XSS during the editing of redirect URLs |
| CVE-2019-15115 | LO Loginwp Profilepress | 8.8 | Aug 16 | The peters-login-redirect plugin before 2.9.2 for WordPress has CSRF |