PT-2021-16044 · WordPress · Profilepress

Name of the Vulnerable Software and Affected Versions: User Registration, User Profile, Login & Membership – ProfilePress Formerly WP User Avatar versions prior to 3.1.11 Description: The issue concerns a lack of proper escaping in the widget for tabbed login/register, which could be exploited in...