ProfilePress — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in ProfilePress, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-66047	ProfilePress WordPress Plugin < 4.17.2 Unauthenticated Arbitrary Plugin Installation RCE CWE-306	8.1	High	2026-08-31
CVE-2026-19848	ProfilePress < 4.17.1 - Unauthenticated Arbitrary Shortcode Execution via Display Name	6.5	Medium	2026-08-21
CVE-2026-41556	WordPress ProfilePress plugin <= 4.16.13 - Cross Site Scripting (XSS) vulnerability CWE-79	6.5	Medium	2026-06-15
CVE-2023-41953	WordPress ProfilePress plugin <= 4.13.1 - Broken Access Control vulnerability CWE-862	5.3	Medium	2024-12-09
CVE-2023-50882	WordPress ProfilePress plugin <= 4.13.2 - Broken Access Control vulnerability CWE-862	5.3	Medium	2024-12-09
CVE-2023-41954	WordPress ProfilePress plugin <= 4.13.1 - Unauthenticated Limited Privilege Escalation vulnerability CWE-269	8.6	High	2024-05-17
CVE-2023-23830	WordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS) CWE-79	7.1	High	2023-05-03
CVE-2023-23820	WordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS) CWE-79	6.5	Medium	2023-05-03
CVE-2023-23996	WordPress ProfilePress Plugin <= 4.5.3 is vulnerable to Cross Site Scripting (XSS) CWE-79	5.9	Medium	2023-04-06
CVE-2021-34624	ProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in File Uploader Component CWE-434	9.8	Critical	2021-07-07
CVE-2021-34621	ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation CWE-269	9.8	Critical	2021-07-07
CVE-2021-34623	ProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in Image Uploader Component CWE-434	9.8	Critical	2021-07-07
CVE-2021-34622	ProfilePress 3.0 - 3.1.3 - Authenticated Privilege Escalation CWE-269	9.8	Critical	2021-07-07

All 13 known CVE vulnerabilities affecting ProfilePress with full Chinese analysis, references, and POCs where available.