目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1359 元

100%

Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress 产品漏洞列表 / CVE 中文分析 26

Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress 产品相关 26 条漏洞,AI 中文标题与摘要、CVSS、POC 一站汇总。

ProfilePress 是一款集成付费会员、电商功能及用户注册登录表单的 WordPress 插件,本页聚合其历史安全漏洞信息。收录内容涵盖该插件在多个版本中披露的跨站脚本、权限提升及敏感数据泄露等缺陷,时间跨度覆盖产品发布至今的所有公开安全公告。读者可在此追踪 ProfilePress 厂商发布的补丁通知,深入分析会员类插件常见的设计弱点,或快速检索该特定产品的过往漏洞记录以评估自身系统风险。

厂商: properfraction

CVE ID 标题 CVSS 风险等级 Published
CVE-2026-104003 ProfilePress 4.17.5 任意短代码执行漏洞 CWE-94 5.4 Medium 2026-10-16
CVE-2026-92551 Paid Membership <= 4.17.4 反射型XSS漏洞 CWE-79 6.1 Medium 2026-10-03
CVE-2026-92536 Paid Membership 4.17.4 短代码注入导致敏感信息泄露 CWE-94 8.8 High 2026-10-03
CVE-2026-85658 Paid Membership Plugin 4.17.2 任意Shortcode执行漏洞 CWE-94 8.1 High 2026-09-19
CVE-2026-18385 WordPress ProfilePress 代码注入漏洞 CWE-94 5.4 Medium 2026-08-16
CVE-2026-13352 WordPress ProfilePress 任意文件上传漏洞 CWE-434 8.8 High 2026-07-17
CVE-2026-4949 WordPress plugin ProfilePress 安全漏洞 CWE-862 4.3 Medium 2026-04-15
CVE-2026-3309 WordPress plugin Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress 代码注入漏洞 CWE-94 6.5 Medium 2026-04-04
CVE-2026-3445 WordPress plugin Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress 安全漏洞 CWE-862 7.1 High 2026-04-04
CVE-2026-3453 WordPress plugin ProfilePress 安全漏洞 CWE-639 8.1 High 2026-03-11
CVE-2025-13642 WordPress plugin Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress 代码注入漏洞 CWE-94 5.4 Medium 2025-12-09
CVE-2025-8878 WordPress plugin The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress 代码注入漏洞 CWE-94 6.5 Medium 2025-08-16
CVE-2024-11083 WordPress plugin ProfilePress 信息泄露漏洞 CWE-200 5.3 Medium 2024-11-27
CVE-2024-2861 WordPress plugin ProfilePress 安全漏洞 CWE-79 6.4 Medium 2024-05-23
CVE-2024-2867 WordPress plugin ProfilePress 安全漏洞 CWE-20 6.4 Medium 2024-05-02
CVE-2024-3210 WordPress Plugin ProfilePress 安全漏洞 CWE-79 6.4 Medium 2024-04-10
CVE-2024-1806 WordPress Plugin Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content 安全漏洞 CWE-79 6.4 Medium 2024-03-13
CVE-2024-1409 WordPress Plugin Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content 安全漏洞 CWE-79 6.4 Medium 2024-03-13
CVE-2024-1535 WordPress Plugin ProfilePress 安全漏洞 CWE-79 6.4 Medium 2024-03-13
CVE-2024-1408 WordPress Plugin Paid Membership 安全漏洞 CWE-79 6.4 Medium 2024-02-20
CVE-2024-1519 WordPress Plugin Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content 安全漏洞 CWE-79 6.5 Medium 2024-02-20
CVE-2024-1570 WordPress Plugin Paid Membership 安全漏洞 CWE-79 6.4 Medium 2024-02-20
CVE-2024-1046 WordPress plugin ProfilePress 安全漏洞 CWE-79 6.4 Medium 2024-02-05
CVE-2022-45083 WordPress plugin ProfilePress 代码问题漏洞 CWE-502 6.6 Medium 2024-01-19
CVE-2022-4697 WordPress plugin ProfilePress 跨站脚本漏洞 CWE-79 5.5 Medium 2022-12-23
CVE-2022-4698 WordPress plugin ProfilePress 跨站脚本漏洞 CWE-79 5.5 Medium 2022-12-23

Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress 产品累计公开 26 条 CVE 漏洞,本页提供按时间倒序的完整列表,包含 CVSS、CWE、AI 中文摘要与可获取的 POC 链接。