ProfilePress < 3.1.11 - Cross-Site Scripting

The ProfilePress plugin for WordPress before 3.1.11 is vulnerable to unauthenticated reflected cross-site scripting XSS via the tabbed login/register widget due to improper escaping of user input. Attackers can inject arbitrary JavaScript via the tabbed-login-name parameter. id: CVE-2021-24522...

WordPress ProfilePress 3.0-3.1.3 - Arbitrary File Upload

A vulnerability in the file uploader component found in the /src/Classes/FileUploader.php file of the ProfilePress WordPress plugin made it possible for users to upload arbitrary files during user registration or during profile updates. This issue affects versions 3.0.0 - 3.1.3. id: CVE-2021-3462...

WordPress ProfilePress <= 3.1.3 - Privilege Escalation

ProfilePress plugin before 3.1.4 allows privilege escalation. Due to insufficient validation in the profile update functionality, authenticated users can supply arbitrary usermeta fields, including wpcapabilities, during profile updates. This enables a user to escalate their privileges to...

ProfilePress <= 4.13.1 — Unauthenticated Privilege Escalation

Improper Privilege Management vulnerability in ProfilePress Membership Team ProfilePress allows Privilege Escalation.This issue affects ProfilePress: from n/a through 4.13.1. id: CVE-2023-41954 info: name: ProfilePress = 4.13.1 — Unauthenticated Privilege Escalation author: daffainfo severity: hi...

WordPress ProfilePress plugin < 4.17.6 - Unauthenticated Member Directory Role Restriction Bypass and User Meta Disclosure vulnerability

Unauthenticated Member Directory Role Restriction Bypass and User Meta Disclosure vulnerability discovered by vuxvinh in WordPress Plugin ProfilePress versions 4.17.6...

CVE-2026-123659

The ProfilePress WordPress plugin before 4.17.6 does not restrict the role and user meta filters its member directories accept to those configured by the administrator, allowing unauthenticated users to list accounts a directory was set to hide and to recover user meta values of listed users...

CVE-2026-123659

The ProfilePress WordPress plugin (versions before 4.17.6 ) contains a vulnerability where it fails to restrict the role and user meta filters accepted by its member directories. This allows unauthenticated users to bypass administrator-configured restrictions to list hidden accounts and recover ...

EUVD-2026-123277

The ProfilePress WordPress plugin before 4.17.6 does not restrict the role and user meta filters its member directories accept to those configured by the administrator, allowing unauthenticated users to list accounts a directory was set to hide and to recover user meta values of listed users...

CVE-2026-123659 ProfilePress < 4.17.6 - Unauthenticated Member Directory Role Restriction Bypass and User Meta Disclosure

The ProfilePress WordPress plugin before 4.17.6 does not restrict the role and user meta filters its member directories accept to those configured by the administrator, allowing unauthenticated users to list accounts a directory was set to hide and to recover user meta values of listed users...

CVE-2026-123661

The ProfilePress WordPress plugin before 4.17.4 does not check that a membership plan is still active when checkout is used to change an existing subscription, allowing subscribers holding any subscription of their own to subscribe to plans the site owner has deactivated, including free plans tha...

CVE-2026-123657

The ProfilePress WordPress plugin before 4.17.6 does not reject negative membership plan identifiers before checking whether a plan is active, allowing unauthenticated visitors to sign up for membership plans an administrator has deactivated and receive the role attached to them...

CVE-2026-123656

The ProfilePress WordPress plugin before 4.17.6 does not correctly evaluate some of its content protection rule conditions when content is rendered outside the main query, allowing unauthenticated users to read the content of pages protected by such rules via the REST API...

CVE-2026-123661

The ProfilePress WordPress plugin (versions 4.16.13 - 4.17.3 ) contains a vulnerability where it fails to verify if a membership plan is active when a user utilizes the checkout process to modify an existing subscription. This Missing Authorization (CWE-862) flaw allows subscribers holding any va...

EUVD-2026-123196

The ProfilePress WordPress plugin before 4.17.4 does not check that a membership plan is still active when checkout is used to change an existing subscription, allowing subscribers holding any subscription of their own to subscribe to plans the site owner has deactivated, including free plans tha...

WordPress ProfilePress plugin 4.16.13-4.17.3 - Subscriber+ Inactive Membership Plan Subscription vulnerability

Subscriber+ Inactive Membership Plan Subscription vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin ProfilePress versions 4.16.13-4.17.3...

CVE-2026-123661 ProfilePress 4.16.13 - 4.17.3 - Subscriber+ Inactive Membership Plan Subscription via Plan-Change Checkout

The ProfilePress WordPress plugin before 4.17.4 does not check that a membership plan is still active when checkout is used to change an existing subscription, allowing subscribers holding any subscription of their own to subscribe to plans the site owner has deactivated, including free plans tha...

CVE-2026-123657 ProfilePress < 4.17.6 - Unauthenticated Inactive Membership Plan Enrollment via Negative Plan ID

The ProfilePress WordPress plugin before 4.17.6 does not reject negative membership plan identifiers before checking whether a plan is active, allowing unauthenticated visitors to sign up for membership plans an administrator has deactivated and receive the role attached to them...

EUVD-2026-123194

The ProfilePress WordPress plugin before 4.17.6 does not correctly evaluate some of its content protection rule conditions when content is rendered outside the main query, allowing unauthenticated users to read the content of pages protected by such rules via the REST API...

WordPress ProfilePress plugin < 4.17.6 - Unauthenticated Inactive Membership Plan Enrollment vulnerability

Unauthenticated Inactive Membership Plan Enrollment vulnerability discovered by Charles Vosburgh in WordPress Plugin ProfilePress versions 4.17.6...

CVE-2026-123657

The ProfilePress WordPress plugin, in versions prior to 4.17.6 , is vulnerable to an Unauthenticated Inactive Membership Plan Enrollment flaw. The root cause is the failure to reject negative membership plan identifiers before verifying if a plan is active. This allows unauthenticated visitors to...