544 matches found
ProfilePress < 4.13.2 - Limited Privilege Escalation via 'acceptable_defined_roles'
Description The ProfilePress plugin for WordPress is vulnerable to limited privilege escalation in versions up to, and including, 4.13.1 via the 'acceptabledefinedroles' function due to incomplete validation on a user controlled key. This can allow unauthenticated attackers to elevate their...
PT-2023-29132 · WordPress · Profilepress
Name of the Vulnerable Software and Affected Versions: ProfilePress Membership Team Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress versions n/a through 4.13.2 Description: The issue is related to the exposure of sensitive informati...
WordPress ProfilePress Plugin <= 4.13.2 is vulnerable to Sensitive Data Exposure
Software ProfilePress Type Plugin Vulnerable versions = 4.13.2 Fixed in 4.13.3 OWASP Top 10 A8: Software and Data Integrity Failures Classification Sensitive Data Exposure CVE CVE-2023-44150 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 15bdf51e3c48 Credits Joshua Chan...
WordPress ProfilePress Plugin <= 4.13.1 is vulnerable to Privilege Escalation
Software ProfilePress Type Plugin Vulnerable versions = 4.13.1 Fixed in 4.13.2 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-41954 Patch priority High CVSS severity High 8.6 Developer Claim ownership PSID d5c79c2dbd22 Credits Revan...
WordPress ProfilePress Plugin <= 4.13.1 is vulnerable to Broken Access Control
Software ProfilePress Type Plugin Vulnerable versions = 4.13.1 Fixed in 4.13.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-41953 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 5739c8dcaf0e Credits Abdi Pranata Required privileg...
VulnCheck KEV: CVE-2023-41954
Improper Privilege Management vulnerability in ProfilePress Membership Team ProfilePress allows Privilege Escalation.This issue affects ProfilePress: from n/a through 4.13.1...
Exploit for Missing Authentication for Critical Function in Properfraction Profilepress
CVE-2021-34621 - WordPress Privilege Escalation A critical vu...
Exploit for Missing Authentication for Critical Function in Properfraction Profilepress
CVE-2021-34621 ProfilePress 3.0 - 3.1.3 - Unauthenticated Priv...
WordPress ProfilePress Plugin < 4.11.0 is vulnerable to Cross Site Scripting (XSS)
Software ProfilePress Type Plugin Vulnerable versions 4.11.0 Fixed in 4.11.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 2c2a55a770a4 Credits Unknown Required privilege...
WordPress ProfilePress Plugin < 4.5.4 Multiple XSS Vulnerabilities
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:properfraction:profilepress"; if description...
WordPress ProfilePress Plugin < 4.5.5 Multiple XSS Vulnerabilities
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:properfraction:profilepress"; if description...
CVE-2023-23830
Unauth. Reflected Cross-Site Scripting XSS vulnerability in ProfilePress Membership Team ProfilePress plugin = 4.5.4 versions...
CVE-2023-23830
Unauth. Reflected Cross-Site Scripting XSS vulnerability in ProfilePress Membership Team ProfilePress plugin = 4.5.4 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in ProfilePress Membership Team ProfilePress plugin = 4.5.4 versions...
CVE-2023-23830
CVE-2023-23830 affects the WordPress ProfilePress Plugin (ProfilePress Membership Team ProfilePress) versions
CVE-2023-23830 WordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in ProfilePress Membership Team ProfilePress plugin = 4.5.4 versions...
CVE-2023-23830 WordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in ProfilePress Membership Team ProfilePress plugin = 4.5.4 versions...
CVE-2023-23830
Unauth. Reflected Cross-Site Scripting XSS vulnerability in ProfilePress Membership Team ProfilePress plugin = 4.5.4 versions...