Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how profilepress compares to other vendors in security performance

View Risk Score →

ProfilePress Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict ContentPaid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.16.18 - Authenticated (Author+) Limited Unsafe File Upload via upload_mimes Filter Expansion

Risk 79
Severity
8.8
First published (updated )
CVE-2026-13352

ProfilePress ProfilePressWordPress ProfilePress plugin <= 4.16.13 - Cross Site Scripting (XSS) vulnerability

Risk 46
Severity
6.5
First published (updated )
CVE-2026-41556

ProfilePress ProfilePressPaid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.16.11 - Unauthenticated Arbitrary Shortcode Execution via Checkout Billing Fields

Risk 40
Severity
6.5
First published (updated )
CVE-2026-3309

ProfilePress ProfilePressPaid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.16.4 - Unauthenticated Arbitrary Shortcode Execution

Risk 28
Severity
6.5
EPSS
0.29%
First published (updated )
CVE-2025-8878

ProfilePress ProfilePressProfilePress < 4.15.20 - Admin+ Stored XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2024-13120
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

ProfilePress ProfilePressProfilePress < 4.15.15 - Admin+ Stored XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2024-10517

ProfilePress ProfilePressProfilePress < 4.15.15 - Admin+ Stored XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2024-10518

ProfilePress ProfilePressWordPress ProfilePress plugin <= 4.13.1 - Broken Access Control vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2023-41953

ProfilePress ProfilePressWordPress ProfilePress plugin <= 4.13.2 - Broken Access Control vulnerability

Risk 25
Severity
5.3
First published (updated )
CVE-2023-50882

ProfilePress ProfilePressProfilePress <= 4.15.18 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure

Risk 27
Severity
5.3
First published (updated )
CVE-2024-11083
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

ProfilePress ProfilePressProfilePress <= 4.15.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via ProfilePress User Panel Widget

Risk 39
Severity
6.4
First published (updated )
CVE-2024-2861

ProfilePress ProfilePressWordPress ProfilePress plugin <= 4.13.1 - Unauthenticated Limited Privilege Escalation vulnerability

Risk 64
Severity
8.6
First published (updated )
CVE-2023-41954

ProfilePress ProfilePress plugin for WordPressPaid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Risk 39
Severity
6.4
First published (updated )
CVE-2024-2867

ProfilePress ProfilePressPaid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'reg-single-checkbox'

Risk 28
Severity
6.4
EPSS
0.04%
First published (updated )
CVE-2024-3210

ProfilePress ProfilePressProfilePress <= 4.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via profilepress-edit-profile Shortcode

Risk 39
Severity
6.4
First published (updated )
CVE-2024-1806
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

ProfilePress ProfilePressPaid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via [reg-select-role] Shortcode

Risk 39
Severity
6.4
First published (updated )
CVE-2024-1409

ProfilePress ProfilePressProfilePress <= 4.15.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Risk 39
Severity
6.4
First published (updated )
CVE-2024-1535

ProfilePress ProfilePressProfilePress <= 4.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via [edit-profile-text-box] shortcode

Risk 39
Severity
6.4
First published (updated )
CVE-2024-1408

ProfilePress ProfilePressPaid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.14.4 - Unauthenticated Stored Cross-Site Scripting

Risk 40
Severity
6.5
First published (updated )
CVE-2024-1519

ProfilePress ProfilePressProfilePress <= 4.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Risk 39
Severity
6.4
First published (updated )
CVE-2024-1570
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

ProfilePress Profilepress WordpressWordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS)

Risk 50
Severity
7.1
First published (updated )
CVE-2023-23830

ProfilePress User Registration\, Login Form\, User Profile \& Membership WordpressProfilePress < 3.2.3 - Reflected Cross-Site Scripting

Risk 38
Severity
6.1
First published (updated )
CVE-2021-24955

ProfilePress User Registration\, Login Form\, User Profile \& Membership WordpressProfilePress < 3.2.3 - Reflected Cross-Site Scripting

Risk 38
Severity
6.1
First published (updated )
CVE-2021-24954

ProfilePress Loginwp WordpressLoginWP < 3.0.0.5 - Reflected Cross-Site Scripting

Risk 38
Severity
6.1
First published (updated )
CVE-2021-24939

ProfilePress Loginwp WordpressXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2016-10925
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

ProfilePress Loginwp WordpressCSRF

Risk 77
Severity
8.8
First published (updated )
CVE-2019-15115

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203