Lucene search
+L

19 matches found

Cvelist
Cvelist
•added 2024/05/17 6:54 a.m.•74 views

CVE-2023-41954 WordPress ProfilePress plugin <= 4.13.1 - Unauthenticated Limited Privilege Escalation vulnerability

Improper Privilege Management vulnerability in ProfilePress Membership Team ProfilePress allows Privilege Escalation.This issue affects ProfilePress: from n/a through 4.13.1...

8.6CVSS8.7AI score0.01389EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/17 12:00 a.m.•7 views

CVE-2023-41954: Improper Privilege Management

Improper Privilege Management vulnerability in ProfilePress Membership Team ProfilePress allows Privilege Escalation.This issue affects ProfilePress: from n/a through 4.13.1...

8.6CVSS5.8AI score0.01389EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/19 12:00 a.m.•8 views

CVE-2022-45083: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress.This issue affects Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User...

7.2CVSS7.2AI score0.00618EPSS
SaveExploits0References2
CVE
CVE
•added 2023/11/30 2:50 p.m.•103 views

CVE-2023-44150

CVE-2023-44150 affects ProfilePress (Paid Membership Plugin) for WordPress; versions

7.5CVSS7.7AI score0.00788EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/30 12:00 a.m.•5 views

CVE-2023-44150: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress.This issue affects Paid Membership Plugin, Ecommerce, Registration Form, Login...

7.5CVSS7.3AI score0.00788EPSS
SaveExploits0References2
Mend
Mend
•added 2023/05/03 3:15 p.m.•7 views

CVE-2023-23830

Unauth. Reflected Cross-Site Scripting XSS vulnerability in ProfilePress Membership Team ProfilePress plugin = 4.5.4 versions...

7.1CVSS0.0044EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/05/03 1:15 p.m.•18 views

CVE-2023-23820

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in ProfilePress Membership Team ProfilePress plugin = 4.5.4 versions...

5.4CVSS5.8AI score0.00441EPSS
SaveExploits0References1
Mend
Mend
•added 2023/05/03 12:39 p.m.•5 views

CVE-2023-23820

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in ProfilePress Membership Team ProfilePress plugin = 4.5.4 versions...

6.5CVSS0.00441EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/05/03 12:39 p.m.•42 views

CVE-2023-23820 WordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in ProfilePress Membership Team ProfilePress plugin = 4.5.4 versions...

6.5CVSS5.9AI score0.00441EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/03 12:00 a.m.•4 views

CVE-2023-23820: Improper Neutralization of Input During Web Page Generation

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in ProfilePress Membership Team ProfilePress plugin = 4.5.4 versions...

6.5CVSS5.8AI score0.00441EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/03 12:00 a.m.•4 views

CVE-2023-23830: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in ProfilePress Membership Team ProfilePress plugin = 4.5.4 versions...

7.1CVSS5.8AI score0.0044EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2023/04/06 8:15 a.m.•17 views

CVE-2023-23996

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in ProfilePress Membership Team ProfilePress plugin = 4.5.3 versions...

4.8CVSS5.8AI score0.00451EPSS
SaveExploits0References1
Mend
Mend
•added 2023/04/06 7:46 a.m.•4 views

CVE-2023-23996

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in ProfilePress Membership Team ProfilePress plugin = 4.5.3 versions...

5.9CVSS0.00451EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/04/06 12:00 a.m.•7 views

PT-2023-19345

Name of the Vulnerable Software and Affected Versions ProfilePress Membership Team ProfilePress plugin versions = 4.5.3 Description The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with admin+ authentication. This type of vulnerability allows an attacker ...

5.9CVSS0.00451EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/06 12:00 a.m.•10 views

CVE-2023-23996: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in ProfilePress Membership Team ProfilePress plugin = 4.5.3 versions...

5.9CVSS5.8AI score0.00451EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/03/29 12:35 p.m.•50 views

CVE-2022-47444 WordPress ProfilePress Plugin <= 4.4.1 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin = 4.5.3 versions...

7.1CVSS6.4AI score0.0044EPSS
SaveExploits0References1
Mend
Mend
•added 2023/03/29 12:35 p.m.•4 views

CVE-2022-47444

Unauth. Reflected Cross-Site Scripting XSS vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin = 4.5.3 versions...

7.1CVSS0.0044EPSS
SaveExploits0References1
CVE
CVE
•added 2023/03/29 12:35 p.m.•106 views

CVE-2022-47444

The CVE-2022-47444 entry concerns an Unauth. Reflected Cross-Site Scripting (XSS) in the ProfilePress Membership Team Paid Membership Plugin. Affected are ProfilePress plugin versions

7.1CVSS6AI score0.0044EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/29 12:00 a.m.•5 views

CVE-2022-47444: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin = 4.5.3 versions...

7.1CVSS8.2AI score0.0044EPSS
SaveExploits0References2
Rows per page
Query Builder