PM
Vendor
ProfilePress Membership Team
8
CVEs
0
On KEV
0
New 30D
Products
PR8.6
ProfilePress
ProfilePress Membership Team
5 CVEs0 on KEV0 new
PM7.5
Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
ProfilePress Membership Team
2 CVEs0 on KEV0 new
PM7.2
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
ProfilePress Membership Team
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-41953 | PR ProfilePress ProfilePress Membership Team | 5.3 | Dec 9 | WordPress ProfilePress plugin <= 4.13.1 - Broken Access Control vulnerability |
| CVE-2023-41954 | PR ProfilePress ProfilePress Membership Team | 8.6 | May 17 | WordPress ProfilePress plugin <= 4.13.1 - Unauthenticated Limited Privilege Escalation vulnerability |
| CVE-2022-45083 | PM Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress ProfilePress Membership Team | 7.2 | Jan 19 | WordPress ProfilePress Plugin <= 4.3.2 is vulnerable to PHP Object Injection |
| CVE-2023-44150 | PM Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress ProfilePress Membership Team | 7.5 | Nov 30 | WordPress ProfilePress Plugin <= 4.13.2 is vulnerable to Sensitive Data Exposure |
| CVE-2023-23830 | PR ProfilePress ProfilePress Membership Team | 6.1 | May 3 | WordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-23820 | PR ProfilePress ProfilePress Membership Team | 5.4 | May 3 | WordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-23996 | PR ProfilePress ProfilePress Membership Team | 4.8 | Apr 6 | WordPress ProfilePress Plugin <= 4.5.3 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2022-47444 | PM Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress ProfilePress Membership Team | 6.1 | Mar 29 | WordPress ProfilePress Plugin <= 4.4.1 is vulnerable to Cross Site Scripting (XSS) |