Lucene search

K
ProperfractionProfilepress

4 matches found

CVE
CVE
added 2024/02/29 1:43 a.m.52 views

CVE-2024-1570

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's login-password shortcode in all versions up to, and including, 4.14.4 due to insufficient inpu...

6.4CVSS6AI score0.00172EPSS
CVE
CVE
added 2024/02/29 1:43 a.m.45 views

CVE-2024-1408

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's edit-profile-text-box shortcode in all versions up to, and including, 4.14.4 due to insufficie...

6.4CVSS6AI score0.00172EPSS
CVE
CVE
added 2024/02/29 1:43 a.m.45 views

CVE-2024-1519

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter in all versions up to, and including, 4.14.4 due to insufficient input sanitization an...

6.5CVSS6.3AI score0.00897EPSS
CVE
CVE
added 2024/02/05 10:16 p.m.36 views

CVE-2024-1046

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin 'reg-number-field' shortcode in all versions up to, and including, 4.14.3 due to insufficient in...

6.4CVSS5.6AI score0.00134EPSS