Lucene search

Profilepress Security Vulnerabilities - 2023

cve

CVE-2022-47444

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin <= 4.5.3 versions.

7.1CVSS

6AI Score

0.001EPSS

2023-03-29 01:15 PM

cve

CVE-2023-23820

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ProfilePress Membership Team ProfilePress plugin <= 4.5.4 versions.

6.5CVSS

5.3AI Score

0.0005EPSS

2023-05-03 01:15 PM

cve

CVE-2023-23830

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ProfilePress Membership Team ProfilePress plugin <= 4.5.4 versions.

7.1CVSS

6AI Score

0.0005EPSS

2023-05-03 04:15 PM

cve

CVE-2023-23996

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in ProfilePress Membership Team ProfilePress plugin <= 4.5.3 versions.

5.9CVSS

5AI Score

0.001EPSS

2023-04-06 08:15 AM

cve

CVE-2023-44150

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress.This issue affects Paid Membership Plugin, Ecommerce, Registration Form, Login Fo...

7.5CVSS

7.5AI Score

0.001EPSS

2023-11-30 03:15 PM