Where
-Infinity
0

Trending

Last week
Last month
Last year

WordPress Paid Memberships ProXSS

Risk 24
Severity
3.5
First published (updated )
CVE-2024-13121

WordPress Paid Membership PluginXSS

Risk 29
Severity
4.8
First published (updated )
CVE-2024-13119

ProfilePress ProfilePressProfilePress < 4.15.20 - Admin+ Stored XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2024-13120

ProfilePress ProfilePressProfilePress < 4.15.15 - Admin+ Stored XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2024-10517

ProfilePress ProfilePressProfilePress < 4.15.15 - Admin+ Stored XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2024-10518
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

ProfilePress ProfilePressWordPress ProfilePress plugin <= 4.13.1 - Broken Access Control vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2023-41953

ProfilePress ProfilePressWordPress ProfilePress plugin <= 4.13.2 - Broken Access Control vulnerability

Risk 25
Severity
5.3
First published (updated )
CVE-2023-50882

ProfilePress ProfilePressProfilePress <= 4.15.18 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure

Risk 27
Severity
5.3
First published (updated )
CVE-2024-11083

properfraction Profilepress WordpressProfilePress - Pro <= 4.11.1 - Authentication Bypass via WordPress.com OAuth provider

Risk 62
Severity
9.8
EPSS
0.09%
First published (updated )
CVE-2024-9947

ProfilePress ProfilePressProfilePress <= 4.15.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via ProfilePress User Panel Widget

Risk 39
Severity
6.4
First published (updated )
CVE-2024-2861
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

ProfilePress ProfilePressWordPress ProfilePress plugin <= 4.13.1 - Unauthenticated Limited Privilege Escalation vulnerability

Risk 64
Severity
8.6
First published (updated )
CVE-2023-41954

ProfilePress ProfilePress plugin for WordPressPaid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Risk 39
Severity
6.4
First published (updated )
CVE-2024-2867

ProfilePress ProfilePressPaid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'reg-single-checkbox'

Risk 28
Severity
6.4
EPSS
0.04%
First published (updated )
CVE-2024-3210

ProfilePress ProfilePressProfilePress <= 4.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via profilepress-edit-profile Shortcode

Risk 39
Severity
6.4
First published (updated )
CVE-2024-1806

ProfilePress ProfilePressPaid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via [reg-select-role] Shortcode

Risk 39
Severity
6.4
First published (updated )
CVE-2024-1409
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

ProfilePress ProfilePressProfilePress <= 4.15.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Risk 39
Severity
6.4
First published (updated )
CVE-2024-1535

ProfilePress ProfilePressProfilePress <= 4.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via [edit-profile-text-box] shortcode

Risk 39
Severity
6.4
First published (updated )
CVE-2024-1408

ProfilePress ProfilePressPaid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.14.4 - Unauthenticated Stored Cross-Site Scripting

Risk 40
Severity
6.5
First published (updated )
CVE-2024-1519

ProfilePress ProfilePressProfilePress <= 4.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Risk 39
Severity
6.4
First published (updated )
CVE-2024-1570

properfraction Profilepress WordpressPaid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Risk 39
Severity
6.4
First published (updated )
CVE-2024-1046
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

properfraction Profilepress WordpressWordPress ProfilePress Plugin <= 4.3.2 is vulnerable to PHP Object Injection

Risk 66
Severity
7.2
First published (updated )
CVE-2022-45083

properfraction Profilepress WordpressWordPress ProfilePress Plugin <= 4.13.2 is vulnerable to Sensitive Data Exposure

Risk 43
Severity
7.5
First published (updated )
CVE-2023-44150

ProfilePress Profilepress WordpressWordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS)

Risk 50
Severity
7.1
First published (updated )
CVE-2023-23830

properfraction Profilepress WordpressWordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS)

Risk 46
Severity
6.5
First published (updated )
CVE-2023-23820

properfraction Profilepress WordpressWordPress ProfilePress Plugin <= 4.5.3 is vulnerable to Cross Site Scripting (XSS)

Risk 40
Severity
5.9
First published (updated )
CVE-2023-23996
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

properfraction Profilepress WordpressWordPress ProfilePress Plugin <= 4.4.1 is vulnerable to Cross Site Scripting (XSS)

Risk 50
Severity
7.1
First published (updated )
CVE-2022-47444

properfraction Profilepress WordpressProfilePress <= 4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

Risk 33
Severity
5.5
First published (updated )
CVE-2022-4697

properfraction Profilepress WordpressProfilePress <= 4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Form Settings

Risk 33
Severity
5.5
First published (updated )
CVE-2022-4698

properfraction Profilepress WordpressProfilePress < 3.1.11 - Unauthenticated Cross-Site Scripting (XSS) in tabbed login/register widget

Risk 38
Severity
6.1
First published (updated )
CVE-2021-24522

properfraction Profilepress WordpressProfilePress < 3.1.8 - Authenticated Stored XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2021-24450
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203