Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

ProfilePress — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in ProfilePress, with AI-generated Chinese analysis, references, and POCs.

Vendor: ProfilePress

CVE IDTitleCVSSSeverityPaused
CVE-2023-41953 WordPress ProfilePress plugin <= 4.13.1 - Broken Access Control vulnerability CWE-862 5.3 Medium2024-12-09
CVE-2023-50882 WordPress ProfilePress plugin <= 4.13.2 - Broken Access Control vulnerability CWE-862 7.1 -2024-12-09
CVE-2023-41954 WordPress ProfilePress plugin <= 4.13.1 - Unauthenticated Limited Privilege Escalation vulnerability CWE-269 8.6 High2024-05-17
CVE-2023-23830 WordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS) CWE-79 7.1 High2023-05-03
CVE-2023-23820 WordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS) CWE-79 6.5 Medium2023-05-03
CVE-2023-23996 WordPress ProfilePress Plugin <= 4.5.3 is vulnerable to Cross Site Scripting (XSS) CWE-79 5.9 Medium2023-04-06
CVE-2021-34624 ProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in File Uploader Component CWE-434 9.8 Critical2021-07-07
CVE-2021-34621 ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation CWE-269 9.8 Critical2021-07-07
CVE-2021-34623 ProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in Image Uploader Component CWE-434 9.8 Critical2021-07-07
CVE-2021-34622 ProfilePress 3.0 - 3.1.3 - Authenticated Privilege Escalation CWE-269 9.8 Critical2021-07-07

All 10 known CVE vulnerabilities affecting ProfilePress with full Chinese analysis, references, and POCs where available.