Peprodev Peprodev Ultimate Profile Solutions
3 CVEs affecting Peprodev Peprodev Ultimate Profile Solutions. Latest disclosed: 2025-05-07. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-3844 | Critical | 9.8 | 2025-05-07 | The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to Authentication Bypass in versions 1.9.1 to 7.5.2. This is due to handel_ajax_req(… |
CVE-2025-3921 | High | 8.2 | 2025-05-07 | The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handel… |
CVE-2025-3924 | Medium | 5.3 | 2025-05-07 | The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to unauthorized access of data via its publicly exposed reset-password endpoint. The… |