unknown profilepress vulnerabilities, newest first
Filter
By year: all 2026 2025 2024 2023 2022 2021
- 5.3CVE-2026-123659EPSS 0.3%
The ProfilePress WordPress plugin before 4.17.6 does not restrict the role and user meta filters its member directories accept to those configured by the administrator, allowing unauthenticated users to list accounts a directory was set to…
- 4.3CVE-2026-123661EPSS 0.2%
The ProfilePress WordPress plugin before 4.17.4 does not check that a membership plan is still active when checkout is used to change an existing subscription, allowing subscribers holding any subscription of their own to subscribe to pla…
- 5.3CVE-2026-123657EPSS 0.2%
The ProfilePress WordPress plugin before 4.17.6 does not reject negative membership plan identifiers before checking whether a plan is active, allowing unauthenticated visitors to sign up for membership plans an administrator has deactiva…
- 5.3CVE-2026-123656EPSS 0.3%
The ProfilePress WordPress plugin before 4.17.6 does not correctly evaluate some of its content protection rule conditions when content is rendered outside the main query, allowing unauthenticated users to read the content of pages protec…