cve.bz

properfraction profilepress vulnerabilities in 2022, newest first

Filter

By year: all 2026 2025 2024 2023 2022 2021

  1. 4.8CVE-2022-4698EPSS 0.7%

    The ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several form fields in versions up to, and including, 4.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authe…

  2. 4.8CVE-2022-4697EPSS 0.7%

    The ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wp_user_cover_default_image_url’ parameter in versions up to, and including, 4.5.0 due to insufficient input sanitization and output escaping. This…