Code injection

2023-11-3015:15:00

PRIOn knowledge base

www.prio-n.com

code injection

profilepress

paid membership plugin

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.3%

JSON

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress.This issue affects Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress: from n/a through 4.13.2.

CPENameOperatorVersion
profilepresslt4.13.3

CPE	Name	Operator	Version
	profilepress	lt	4.13.3

References

patchstack.com/database/vulnerability/wp-user-avatar/wordpress-profilepress-plugin-4-13-2-sensitive-data-exposure-via-debug-log-vulnerability?_s_id=cve