Script-for-profile-press-exploit-in-wordpress

CVE-2021-34621 – ProfilePress WP User Avatar Privilege Escal...

Exploit for Missing Authentication for Critical Function in Properfraction Profilepress

CVE-2021-34621 - WordPress Privilege Escalation A critical vu...

WordPress ProfilePress Plugin Privilege Escalation (CVE-2021-34621)

A privilege escalation exists in WordPress ProfilePress plugin. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

WordPress ProfilePress Plugin 3.0.0 < 3.1.4 Multiple Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:properfraction:profilepress"; if description...

WordPress ProfilePress 3.1.3 Plugin - Privilege Escalation (Unauthenticated) Exploit

Exploit Title: WordPress Plugin ProfilePress 3.1.3 - Privilege Escalation Unauthenticated Exploit Author: Numan Rajkotiya Vendor Homepage: https://profilepress.net/ Software Link: https://downloads.wordpress.org/plugin/wp-user-avatar.3.0.zip Version: 1 ProfilePress Formerly WP User Avatar 3.0 -...

WordPress ProfilePress 3.1.3 Privilege Escalation

Exploit Title: WordPress Plugin ProfilePress 3.1.3 - Privilege Escalation Unauthenticated Date: 23-08-2021 Exploit Author: Numan Rajkotiya Vendor Homepage: https://profilepress.net/ Software Link: https://downloads.wordpress.org/plugin/wp-user-avatar.3.0.zip Version: 1 ProfilePress Formerly WP Us...

WordPress Plugin ProfilePress 3.1.3 - Privilege Escalation (Unauthenticated)

Exploit Title: WordPress Plugin ProfilePress 3.1.3 - Privilege Escalation Unauthenticated Date: 23-08-2021 Exploit Author: Numan Rajkotiya Vendor Homepage: https://profilepress.net/ Software Link: https://downloads.wordpress.org/plugin/wp-user-avatar.3.0.zip Version: 1 ProfilePress Formerly WP Us...

CVE-2021-34621

CVE-2021-34621 affects WordPress ProfilePress plugin versions 3.0.0–3.1.3. The root cause is in RegistrationAuth.php, enabling unauthenticated users to register with administrator privileges, effectively granting full site control. Impact documented as unauthenticated privilege escalation with po...

CVE-2021-34621

creationtimestamp| type| source ---|---|--- 2021-07-05 12:18:01+00:00| seen| https://t.me/CyberSecurityTechnologies/3770 2021-09-21 04:41:55+00:00| seen| https://t.me/pwnwikizhchannel/837 2023-04-27 09:58:59+00:00| confirmed|...

ProfilePress Plugin for WordPress 3.x < 3.1.4 Multiple Vulnerabilities

The WordPress ProfilePress Plugin installed on the remote host is affected by multiple vulnerabilities : - An unauthenticated privilege escalation exists when supplying wpcapabilties as an array parameter while registering. CVE-2021-34621 - An authenticated privilege escalation exists within the...